That came up too. The security aspect of the product does less than nothing: not only does it fail to encrypt data end-to-end, it uses public ip addresses for b

That came up too. The security aspect of the product does less than nothing: not only does it fail to encrypt data end-to-end, it uses public ip addresses for both the control and data plane. Those public endpoints had an unauthenticated RCE vulnerability recently. It’s a staggeringly bad product and it blew my mind now it was impossible to convince anyone of this. We used pictures, for crying out loud. We did all the things everyone here has been helpfully suggesting. Talking about business consequences (dire), costs (enormous), risks (massive), etc… The response was: “the sales guy from the vendor assured me it’s all fine. This is just your opinion.” The causal chain of a->b->c was just not sinking in. The CTO he could not judge anyone’s expertise not just mine — he also couldn’t judge the lack of expertise by the vendor and their sales team. So he chose based on who has the nicer suit, the shiniest smile, etc…