A tech pledge to support user privacy which ignores the risk and market dynamics of security breaches? The mind boggles... How about dedicating resources to ma

A tech pledge to support user privacy which ignores the risk and market dynamics of security breaches? The mind boggles... How about dedicating resources to making sure everyone upgrades their devices, patches security vulns on internet-facing servers, uses password managers, etc? How about at the very least asking "if we suffered a breach, how would we know?". Because ethics aside, there seems little incentive for startups to worry about it.