Yes, at least in medical settings, I think it&#x27;s just as much about accountability and CYA than actually improving overall real-world security.  If that person&#x27;s action results in a leak than they can be personally sued and fined.  Doesn&#x27;t matter if they did it out of frustration with obstacles that made it very difficult to &quot;get stuff done&quot;.