Last I saw they still have two “special employees” with “read only” access. So he still has “read only” access

But also? They already made code changes. And while I doubt they would be able to do anything meaningful, it is not hard to add another user account or an ssh tunnel to get through the “air gap”. And it would not be beyond musk et al to call that “hacking”.