Quite the opposite, EY as an aidotor has, and is supposed to het, access to any financially relevant data, documents and transactions they need to their job. That includes, among other things, invoices to customers, suppliers, inventory data and transactions, bank statements, credit card data, contracts with clients and suppliers and so on and so forth. That is actually part of a financial auditors job and responsibility. Yryong to minimize data access is exactly what Wirecard did, and EY accepted for some reason. Which absolutely not normal, it is in fact a major red flag.