> who has more expertise at building and running an SSO service than a company that's selling that service? If Okta gets away with this (and the Equifax breach

> who has more expertise at building and running an SSO service than a company that's selling that service? If Okta gets away with this (and the Equifax breach and subsequent outcome suggests they will) it proves that the market doesn't actually care about security, thus a company selling that service has little incentive to actually invest in security.