I guess all I can do is say that 20 years of good behavior is enough to convince the state to release you for first degree murder, and most people seem to feel

I guess all I can do is say that 20 years of good behavior is enough to convince the state to release you for first degree murder, and most people seem to feel ok about that. I'd suggest that most people probably don't know their spouses or best friends for 20 years before trusting them, either. And you could declare bankruptcy twice in that time and still have pretty good credit. So as a society we seem to have accepted that 20 years is actually a pretty long track record. Not sure why our standards for infosec should be higher than any of those things.