&gt; Tellingly, Google&#x27;s security efforts were also a top-down reaction to a major security incident.<p>What was that? All I can think of is when the chinese stole their source code but the response to that would presumably be more about managing who has access to what internally than improving the security of their user facing products.<p>edit: to be clear I&#x27;m thinking of the time they had code stolen by a chinese employee in their china office, presumably on request of the govt.