I think what he’s saying is that the industry’s still working despite the fact that such experts are generally not present, and that this can continue. Separat

I think what he’s saying is that the industry’s still working despite the fact that such experts are generally not present, and that this can continue. Separately, I think that people consistently haven’t actually penalized most companies for security breaches, anyway. Big brands get hacked, everybody collectively moans for a week, and then they go back to using the exact same products. People publically get mad, but they don’t vote with their wallets, revealing how they really feel about security.