But is this really true? In my experience, it's been less of a "come to Jesus" moment and more a slow process of hiring experienced folks who understand the app

But is this really true? In my experience, it's been less of a "come to Jesus" moment and more a slow process of hiring experienced folks who understand the appropriate privacy/security posture for a growing company. Edit: I'm yet to experience (or see) it as a public breach of trust, especially when the company already has thousands of employees.