[cierra]

I think you are exaggerating the amount of internal security there is at facebook. Up until a couple years ago, many of the internal tools didn't have any privacy restrictions to stop employees from looking at private user data. I looked at user data all the time as part of my job and was never questioned about it. Of course I never looked at anything I shouldn't have out of fear of getting caught. But no one checked to see why I was always looking at user data.

Even after common tools were changed to add warnings about accessing private data, there were still many ways to go around them. All engineers have access to user databases as well as the thousands of other data sets that contained user data.

The reason why most employees wouldn't abuse their power is the fear of getting caught (not due to any actual internal security). From this article, it's not clear how the fired employee accessed private data. So I can't say if they did something too obvious or if they put any effort in making sure they had plausible deniability if caught. This article doesn't indicate whether internal security actually caught the data access violation. It sounds like they only found out after the accusations appeared on twitter.

[rrauenza]

It's not even clear he did for sure -- he could have been fired for just claiming he could since the claim harms the company.