> How does this work in a world where developer administer their own services?

in that world the developer plays admin too, and can configure crossplane as an admin.