Finding smart solutions to the issue of corporate data breaches is laudable. Finding solutions that are feasible for use by people who are being paid the lowest

Finding smart solutions to the issue of corporate data breaches is laudable. Finding solutions that are feasible for use by people who are being paid the lowest wage that the company they work for can get away with will be miraculous, IMHO. The reason I say this is that knowing not to give a sensitive AWS S3 bucket public access is 101-level AWS expertise, which means either of these scenarios are likely: - The persons responsible did not know any better, or - They did know better, but made an error provoked by pressure due to understaffing. Both of these point to a lack of competent security personnel, either due to understaffing, or hiring insufficiently experienced staff, both of these due to minimizing salary budgets (or clueless hiring managers, perhaps).