the thing is you also need a technical person on staff who is good at vetting. I consult and am starting a new place in a week, I expect it will be fine, but the interview was a hr person and two techies, the hr person asked some questions and then asked if the techies had questions - no he seems fine. Which of course I am but still, having trusted techies is not the same as having trusted techies that are good at determining who not to trust.