Smaller orgs tend to get hit the hardest on these sorts of things, because the licensing for additional things like Edge Transport servers is harder to swallow,

Smaller orgs tend to get hit the hardest on these sorts of things, because the licensing for additional things like Edge Transport servers is harder to swallow, and they tend to have less fancy firewalls that are a bit dumber. Not every gateway can detect what a known exploit looks like.