A chain is only as strong as its weakest link. If <i>anyone</i> has enough privileges for a malicious attacker to use their account&#x2F;info to compromise your network then <i>that</i> is the measure of how well protected you are. In this case it was a grandmother, but it doesn&#x27;t have to be. It could be a salesperson, an HR manager, a burnt out developer. When a business grows to a sufficient size that there are people working in it who are disinterested in &quot;computers&quot; or &quot;processes&quot; (in the case of a software startup that&#x27;s probably over about 10 staff), then you suddenly introduce some <i>huge</i> weak points in your IT infrastructure. That <i>should</i> be scary.