Having gone through SOC2 at two different companies, anyone who takes these certificates seriously is a fool.