Fun example! Agree, it's all judgement, and there's clearly a broad spectrum. Some good example points on it might include: * Implemented all possible securi

Fun example! Agree, it's all judgement, and there's clearly a broad spectrum. Some good example points on it might include: * Implemented all possible security measures, above and beyond reasonable, but were breached by a nation-state actor. * Took reasonable professional-standards measures, but were breached by professional thieves. * Took most standard measures, missed some, but were breached by a modestly skilled thief. * Were somewhat negligent and some people found an unlocked door and stole the goods. * Created an attractive nuisance, too tempting for some people to avoid, and some people looted the place. * Left the goods out on the sidewalk and were surprised when people helped themselves. In all but the last sidewalk example, I'd say the taker has full responsibility as a thief - an honest person would not get involved, and a skeptical person would wonder if it was a honeytrap. All but the last two examples require not only dishonesty, but also require specific planning and actions to get the goods. In all but the last two examples, I'd say that the taker is responsible for their acts, and nothing about the owner's actions mitigates that. That said, the protector of the goods also has full responsibility for taking appropriate measures for the reasonably foreseeable threats. I guess I'd put it as responsibility is not divided but added or multiplied by the parties.