I agree that company culture is something that goes top down and you do not change by simply swapping out the security team. Zoom has (had?) a culture of wilful

I agree that company culture is something that goes top down and you do not change by simply swapping out the security team. Zoom has (had?) a culture of wilful negligence, taking dangerous shortcut (they are the only company whose mess Apple had to fix themselves with security patch for god sake – I still can't believe this one actually), etc. I might be pessimistic but I don't think such a culture is something you can correct very easily, because it is anchored at the very top of the company.