Yes, to say we should require otherwise is to embrace the status quo. Demanding that everybody hold their employer accountable for any breach is simply an unreachable standard, given the power distribution between employers and employees and the lack of sufficient "good" employers. So shifting the conversation to complaints about complaints (for not being sufficiently motivated to risk everything trying to burn the system down) is just distraction and helping the status quo even more.
