I don't disagree, it's pretty damn embarrassing someone can get the keys to the kingdom through some social engineering.

My only concern is what happened with Equifax - some punishment is put on the company and it's only a token amount and nothing changes.