Depends what you mean by "dev". Between local dev and prod? Sure. But some people use that term for a live (cloud deployed) environment and I'm less certain there should be policy differences here. I just think of all the times a permission issue caused an outage...
