that's not entirely true - it's possible for all the data of that nature to be in an audit-logged data store, and to require specific business cases for access to the data. So you can only see a user's private information if there's a specific bug you're working on, and even then the access is audited.

I mean, the data is still accessible, it's just not easy to get it willy-nilly without setting off alarms.