Without evidence we're both just guessing. Perhaps someone else will chime in with direct knowledge of how FB works.

It's _probably_ true that things in general have gotten better since then, and it's probably true that they're better at _some_ companies like Google, Facebook, and Amazon - but I'd tend to agree that it's very unlikely to be true for "most companies".

Who watches the watcher indeed.

Source: I interviewed with their security team once and got a fair idea of how their various security teams are organized.

Do I understand correctly that you just admitted that your (extremely confident!) factual statement here:

> most companies have pretty strict internal controls for this sort of thing

was actually "just guessing"?

1) my direct knowledge of similar companies

2) the fact that no large scale leak from internal sources has happened from FB which is evidence that they have at least some internal controls or procedures to prevent one