> Being oblivious to breaches clearly goes against this I don't see how it does. Even "ensuring appropriate security measures" is subjective in the first place

> Being oblivious to breaches clearly goes against this I don't see how it does. Even "ensuring appropriate security measures" is subjective in the first place, plus as we all know, no amount of security is perfect and breaches will always happen either way. Even if you took enough subjectively appropriate security measures, and it still happened anyway, there's nothing that guarantees you'll even know about it in the first place.