I’m not an “actual security researcher” but I was an “actual security officer” at a reeeeally large shop.

Yes, researchers are right. But they don’t dictate what else we have to let slide to allow time to work this constantly.

And neither are they on the hook for it.

They can be pedants, but they can’t do it blind.