[giancarlostoro]

This will end badly when they do get hacked and people will suffer for it. I get that you don't want to be on the ball for it, but you're better of spending on annual security audits and ensuring any raised concerns are addressed in a reasonable time frame vs getting a few lawyers together to write something that says even if we "somehow" got hacked, we will not be liable we tried not to!

Nobody expects to be hacked until it happens.

[BeefWellington]

Oftentimes it's not even a hack. Many years ago the national student loan lender in Canada lost a hard drive containing seven years' loan details, leading to a class action suit.[1]

[1]: https://www.canada.ca/en/employment-social-development/progr...