> It's not enough for the people who run a service to be good people – they also have to take steps to insulate themselves (and their successors) from the kind of drip-drip-drip rationalizations that turn a series of small ethical waivers into a cumulative avalanche of pure wickedness

I completely disagree with this guy. No amount of process or protocol can be a substitute for an actually decent organization culture; without the latter, everything falls apart no matter how good the former is.