No need to speculate, thanks to the links provided by mzs at https://news.ycombinator.com/item?id=32562815#32564900 https://news.ycombinator.com/item?id=3256281

No need to speculate, thanks to the links provided by mzs at https://news.ycombinator.com/item?id=32562815#32564900 https://news.ycombinator.com/item?id=32562815#32564900 From https://www.washingtonpost.com/technology/interactive/2022/twitter-whistleblower-sec-spam/risk_committee_issues.pdf https://www.washingtonpost.com/technology/interactive/2022/t..., page 6: "..more than half of Twitter's 500,000 servers are running out-of-date operating systems so out of date that many do not support basic privacy and security features and lack vendor support. More than quarter of the 10,000 employee computers have software updates disabled! More than half of Twitter employees have access to Twitter's production environment -- unheard of in a company the age and importance of Twitter, where nearly all employees have access to systems or data they should not. At Twitter engineers work on live data when building and testing software because Twitter lacks testing and stage environments; work is conducted instead in production and with live data.. "This did not happen overnight. To get where Twitter is today took.. many years.. required repeated downplaying of problems, selective reporting, and leadership ignorance around basic security expectations and practices."