A technology industry which will happily enforce best practices upon itself as individuals should also enforce best practices upon companies within the industry as well.
That would mean not using the products of companies like Elasticsearch which encourage bad practices in their business model.
Archive link because the security firm in question persuaded the author to remove their name with legal threats.