I think that it speaks volumes when an open source project has a chain of failures, the amount of people investigating it independently to come up with a conclusion to how it happened while proprietary vendors do not have that level of insight or transparency, at most you’ll get a blog report about how they’re very sorry. There’s not accountability like there is in other industries, if a plane goes down typically it’s a very involved process to figure out the root cause of the issue (ignore Boeing that’s an outlier). Planes of the same model can and have been forcefully grounded until the underlying cause is determined. In most of these big corporate breaches nothing similar really happens, do you think that equifax was mandated to take down their networks until they could determine how the attackers got in? Fuck no.