They also compensate security engineers well but they also seem like an exception to the rule