But it doesn't take much idiocy to make a mistake (keep passwords in cleartext in a database, leave unpatched machines open to the wild, allow SQL inject attack

But it doesn't take much idiocy to make a mistake (keep passwords in cleartext in a database, leave unpatched machines open to the wild, allow SQL inject attacks, etc.). Security needs to be taken seriously at a practically fractal level. Historically the FBI has not been good at this.