I've always worked at large companies with dedicated Infosec groups, so I'm surprised to hear security is so awfully lax at so many places. I thought maybe sma

I've always worked at large companies with dedicated Infosec groups, so I'm surprised to hear security is so awfully lax at so many places. I thought maybe small companies would be using open source software and something like: https://www.nitrokey.com/ https://www.nitrokey.com/ although it clearly takes some know-how to get set up with something like this.