If u are a non-technical founder and outsource your dev work, and no one audits anything, its very easy to claim stuff that doesnt actually exist. Willful(?) ig

If u are a non-technical founder and outsource your dev work, and no one audits anything, its very easy to claim stuff that doesnt actually exist. Willful(?) ignorance. At my last employeer we handled legal data over the internet and all the encryption had been disabled and never turned back on. The CTO was a DBA, and the CEO thought he was god and never questioned anything he produced. I came in and almost left straight away, but felt sorry for the clients who paid for this garbage. And the (multiple different) legal software platforms we integrated with was not much better, embedding master passwords / decryption routines in un-obfuscated dlls.