[jrhurst]

Wait. How is this a catch 22? There is no. "In order to do Y you must first do X. But in order to do X you must first do Y"

[shawabawa3]

In order to get paid you must be hacked, in order to be hacked it must be your fault, if it's your fault you can't be paid

[fundingshovel]

That's not what this is staying at all though. It's saying "In order to get paid you must show you took reasonable precautions not get hacked AND get hacked." It's pretty hard to argue ignoring a known issue for 9 months is taking reasonable precaution. I don't see how that's any different then not paying when someone falls on because of broken steps you knew about and didn't fix, which would be pretty common.