I can’t imagine having a hobby that involves passing by, and in some cases climbing over, the exposed remains of others who died doing that same activity.
SSO is based on AssumeRole which issues temporary credentials (session tokens) instead of using static credentials. SSO-like centralized access management is important to prove that when someone leaves your company that you cut off their access to all data and systems, much easier to do that when everyone uses SSO.
SOC2 doesn’t specify git branch logistics. In general you need to prove all system changes were reviewed, justified, and approved by another person. The goal is no single person can deploy unsupervised production system changes, and the justification for changes were approved and documented. How you do that is all in the art of IT.
But this is still the crucial flaw in Marxism, be because some greedy bastard will control means of production either way to their own benefit, and I'd rather that be owned by a professed capitalist who is regulated by the government rather than owned by the government that then regulates itself thus accountable to no one. This was really the major flaw in Marxist systems, the fat cats were given authority to govern both the public and private sector to their own benefit, no counterweight.