I guess the question to ask is: Medium sized company. It's your job to pick a stack. Your performance will be evaluated on whether a team of security consultan

I guess the question to ask is: Medium sized company. It's your job to pick a stack. Your performance will be evaluated on whether a team of security consultants can hack you. Your stock grant will either multiply 100x or divide 10x depending on whether you get hacked. You get 1 month of unfettered access to all employee workstations. The consultants get one week to try to break in. Do you want a modern OS with its USB stack and whatever high level drivers, or do you want to put everyone on old school machines with bare metal drivers? Assume the attackers get to know which choice you made.