> but the truth is that the company has a responsibility to ... These boxes provide a one-stop hacker shop for all data exfil and malware injection that normal

> but the truth is that the company has a responsibility to ... These boxes provide a one-stop hacker shop for all data exfil and malware injection that normally don't exist. In theory they can _sign security updates_, send fake announcements, just intercept, redirect and drop emails, etc. It's just too hard for me to understand how it's supposed to add security, unless these would be NSA endorsed or something.