Whenever I hear about ransomware attacks, I wonder how anyone could pay for IT services to set up a system where: 1) there are no meaningful, clean backups and

Whenever I hear about ransomware attacks, I wonder how anyone could pay for IT services to set up a system where: 1) there are no meaningful, clean backups and 2) regular users can overwrite many / most files 3) and/or administrators use machines that are easily compromisible 4) and/or the system is built on insecure technology The fact that 1) could negate 2), 3) and 4) means people are doing IT and are taking good money from corporations or taxpayers when they absolutely should not. So when there are things like this in the news where large numbers of users are affected, I can't help but wonder why we don't see IT companies getting strung up (figuratively, of course) and publicly embarrassed for each and every one of these incidences.