You seem levelheaded throughout the thread and make good points more articulately than I ever could but this seems a bit emotionally involved.<p>It&#x27;s possible that we&#x27;re all correct: This guy could be a wildcard researcher that plays fast and loose <i>and</i> the CSO could be covering his own ass. You say he&#x27;s building a first rate application security team. Is it hard to believe that he could have made the mistake of focusing almost exclusively on that?