Judging from their username, tslathrowaway31, this could be an insider who knows more than what's in the memo.

Regardless, I think configuration should be treated as code (use version control and reviews, write tests), since the damage you can do through misconfiguration is often as great as anything you can do with code.