Did your friend come up with any solutions to the trusted associate issue? Seems like there are two obvious approaches: the carrot (pay your employees well above market rates) or the stick (a literal stick, in the extreme) to encourage loyalty.
But there are presumably other ways to engineer your account permissions so that one or two rogue associates cannot clean you out?
It's kind of like buying a safe. You can always improve the quality of the safe, but you can't always trust the safe is 100% foolproof. The more you have in the safe, the more you worry there's that one thing you didn't think about that prevents someone from walking away with all the money.
But there are presumably other ways to engineer your account permissions so that one or two rogue associates cannot clean you out?