Haha, we are ahead of you. We realised we were gonna get owned a long time ago, since business and engineering teams prioritised speed over security. And also that it is genuinely hard to secure everything.

This is why there are so many resilience initiatives in serious organisations. Assume it is gonna happen. Limit blast radius, ensure effective recovery.