And if you don't 'visit' them in a month or two, someone else like you will visit them. Now they know their security is crippled, there is no way the patched al

And if you don't 'visit' them in a month or two, someone else like you will visit them. Now they know their security is crippled, there is no way the patched all holes (system, process, operations) in such a short notice, and we know they can be blackmailed and pay big money. The only way to mitigate this risk is actually walk the walk (implement appropriate security controls).