It comes down to this: Don't assume companies are incompetent at proper dealings around employee access to products they use just because they're small. These things tend to be correlated, but it hurts small companies trying to deal with this correctly.
Edit - Let me phrase it like this: By locking away account management and security tools you're implicitly stating only large enterprises should care about security.