> I feel like the people who calculate that it's more cost effective to deal with the hit from a security breach vs spending money on good security have won.

and it's not like it wasn't forseeable 20/40/60 years ago. thou the question remains what would be the alternative?

what really bugs me is the fact that it essentially puts all the 'nothing to hide, have my data' folks in the right because, yea, why bother.