While it is a burden, the point is that software needs to be audited before it is installed and that is an even bigger burden on the company. If it isn't essent

While it is a burden, the point is that software needs to be audited before it is installed and that is an even bigger burden on the company. If it isn't essential to the business, it simply isn't going to be considered, At least that is the way in many of the non-IT companies I have worked for which handle massive amounts of data on other people. In this regard, Twitter's attitude is distressing. We may think of them as an IT company, but their actual business involves handling massive amounts of data on other people. While confidentiality of that information may not be the biggest concern, since much of it is intended to be published, the authenticity of that information is.