Enterprise compliance confuses people. The problems are all simple in principle, but there are so many of them and they cost so much that nearly no enterprise seems to be able to manage the basics. It'd say the more HN comment here is one who misunderstands that complex problems cannot be solved by technical solutions alone.