The fact that someone can access production database without approved privilege escalation is totally the organization's fault. Not a Cursor failure, nor a Railway failure, nor a backup-architecture failure. Unless the organization identify the root cause, the problem can happen again.