### Comment:
Rule 1 of cyber security is if it’s possible to break it will be broken. The death of cyber security doesn’t come from not enforcing consequences against companies who deploy inherently insecure systems.

### REPLY:
&gt;not enforcing consequences against companies who deploy inherently insecure systems. 
  
 Who said anything about that? It isn't like there are only two scenarios: 
  
 1. User gets in trouble, RH gets off with no problem. 
 2. User gets off, RH gets in trouble. 
  
 A likely scenario is both the user and RH end up with consequences from this.

### END.