On: They do take security seriously

[GeneralMayhem]

I think it depends on the company. For a tech-focused company where a breach is a slap in the face of their core competencies, sure. For a megacorp that sees IT as a loss center, it's harder to believe.