If you have a remote developer who has access to a development database that actually has mostly production-level data inside it, would you know if that developer downloaded the whole database to their home system?

Would you know it if they put in a backdoor page on a production site that allows raw query access?