So what's the alternative? No one does pen testing and then any government (or motivated individual) can access your data? I'd rather my own government do it th

So what's the alternative? No one does pen testing and then any government (or motivated individual) can access your data? I'd rather my own government do it than no one at all. It is particularly hairy, and I don't think there's a perfect solution for the average person.