Twitter may not have the corporate ability to care about things beyond the horizon. IIRC the first time they posted a profit was less than two years back. Goog

Twitter may not have the corporate ability to care about things beyond the horizon. IIRC the first time they posted a profit was less than two years back. Google embarked on their BeyondCorp/zero-trust initiative after the 2009 Chinese APT breach. The teams working on their internal security had firepower and support from the very top of the organisation - and it took them seven years to get from "we want to make entire classes of attacks impossible" to "we can now enforce it". The disappointing truth in tech is that - apart from a few exceptions - security gets only superficial attention, because doing it right is a long-term investment. You need to be reliably profitable for that.