What they're doing is both simultaneously petty and upstanding. The idea that they shouldn't do it because a vendor might not make payroll, because a sysadmin

What they're doing is both simultaneously petty and upstanding. The idea that they shouldn't do it because a vendor might not make payroll, because a sysadmin can't handle a DDoS attack on a major credit card system is absurd. Armored cars are armored for a reason. Major money networks should be armored as well, and if they're not, its the money networks responsibility if it happens, same as its the armored car companies responsibility if the car gets robbed. Also, don't confuse fault with responsibility -- they are not the same thing. edit: typo