Copying production data into less-protected dev and test environments multiplies the exposure of every record. Using synthetic or masked data outside production keeps real people's information where it's actually defended.
“Real data in a test database is a real breach waiting.”