I'm not sure how one evaluates that they do good OpSec? Even firstlook failed and accidentally got Reality Winner arrested. So how does one know? Personally the

I'm not sure how one evaluates that they do good OpSec? Even firstlook failed and accidentally got Reality Winner arrested. So how does one know? Personally the question of OpSec gets more intense when A) I learn they let in a reporter from the New Yorker in to do, well, basically it's a Cribbs episode. And 2) when I learn that the group managing critical leaks is on the same floor as everyone else. Could you please protect your sources at least as well as Apple protects the Animoji release?