I specifically have experience with Kaseya. I kicked and screamed to get us off of it, the IT people insisted it was top notch.
So when I became CFO I fired them (outside company), not just for this, but it didn’t help.
It’s bad software. 24/7 full low level access is exactly what it is. We had an add on that stored admin credentials in a JSON… so looking back on that, it seems this should have happened sooner.