[KMag]

Don't get me wrong. I think ethics work is hugely important, particularly in this new field. However, ethics are much more abstract than security, and therefore much harder to evaluate objectively.

> dollars lost due to losing trust.

Trust, ethics, and public moral outrage are hopefully related, but not the same thing. Also, measuring loss of trust and allocating changes in revenue to that change is very difficult.

> compliance costs?

I think many people would agree that there's often a big difference between legal requirements and ethics.