> damning indictment of the mindset of the vast ineffectual mess that is the cybersecurity industry

Cybersecurity is not about stopping issues but about compliance and liability. Attend RSA once, and you will see it yourself.

It makes sense when you consider the main threat you are protecting yourself from is lawsuits.

The lawsuits come from the issues though.

"We did everything we could, like any decent person would"

Exactly, it's very 'No Way to Prevent This,' Says Only Nation Where This Regularly Happens