If there had been a hack of the data collected by this program, people could very easily and rightly have been fired or disciplined for exposing corporate data

If there had been a hack of the data collected by this program, people could very easily and rightly have been fired or disciplined for exposing corporate data through a VPN. Even if most things are run through a corporate VPN or intranet, one sign in to your work account on Office 365 is game over for the company.