I think it is pretty unethical to give someone access to company data without the companies permission, and especially to allow that person to actually work on company products.
First part of the sentence, sure. Last part is debatable, so many things are outsourced or contracted, any product is largely contributed to by non employees.