i see. that's a game theory lens.
while it probably makes sense for certain consumer data companies, do you think about cases where poor data security/privacy actually harms the company? eg: when sensitive company data gets leaked during third-party interactions?