@da_667 when I was in consulting there were a few times we uncovered huge security problems in systems. We'd get very serious, tell the client, say something doom-laden like 'this is an existential risk to your business'. No-one really believed us and, honestly, they were right not to. There's genuinely no accountability for any of this.