We live in a post Snowden world. It only takes one mistake to have all your data out in the wild.

I think attributing changes away from trusting employees to simply "bad management" and ignoring issues like employee malfeasance... is overly simplistic and dilutes complicated issue conversations.

There needs to be a balance between trust and security. It's easy to take it too far in either direction.