Good point- I often see, especially in corporate press releases about security incidents, etc. an apology (often without even directly saying they are responsib

Good point- I often see, especially in corporate press releases about security incidents, etc. an apology (often without even directly saying they are responsible- or with a company but no actual individual people taking responsibility), but then no explanation of what they are actually changing to fix the problem. Or there will be a “designated fall guy” who was not personally involved but is apparently paid with a prearranged “golden parachute” to resign and take the blame, which is just a deflection strategy to avoid actually taking responsibility while appearing to do so.