Of course giving out access is probably a bad idea -- so what would be a good alternative for them to do instead?
1. gives a copy of your data to someone else 2. is legally questionably still your data 3. is stagnant (as you usually only backup once a week) 4. there is no way to track where that data goes