Shouldn't VCs be required to perform necessary due diligence to ensure that companies they are funding have implemented security safeguards at par with the best available in the world? A startup, driven by the desire to grow, will often cut corners. It is VC money which enables such startups to scale. Scale more often than not means more users, more data. Therefore, the extent of damage in the event of a breach is also indirectly being fuelled by VCs. Shouldn't VCs be held accountable? Shouldn't they be forced to strengthen their due diligence process?