Each user or application that has to access to production data does so using a unique and individual identity that is managed by Azure AD.
All human users are required to use strong passwords, as well as MFA (multi-factor authentication). All machine users have separate application identities that can either be configured by MSI or ID and secret.
To access your archived items, follow the step outlines in this how-to.