Yeah but if you defense against somebody erasing a database is "we remove their access when they're fired" then your defense is garbage.

Like there's so many other attack vectors besides an upset ex-employee.. Like all those articles about NK employees who presumably are trying very hard not to be fired. Or employees using company provided insecure email software leaving them vulnerable to ransomware et al.