Then you get people nagging about how big companies are bad at security with leaks. It is easy to nag when they never had to secure anything or operate at scal

Then you get people nagging about how big companies are bad at security with leaks. It is easy to nag when they never had to secure anything or operate at scale of 100's of employees and 1000's of users. It is just hard even if you have good practices in place, because checking that everything is in place and training new people to follow rules is a lot of work.