Just to be sure, I'd make a backup of my current ZC files and database before allowing the developer access ...