This is 100% true, but does that mean that they should experience a data breach as a means of teaching them a lesson? Seems like that could create a lot of collateral damage among the affected account holders.