[gumby]

I presume the training is on things not to do, not how to avoid detection.

So if you analyze data, someone else has collected it, and someone else gets your output, and everybody has different opsec requirements.

And everyone has different domain expertise. The mathematicians who come up with encryption algorithms likely don’t have the same expertise as the people who decap chips to extract keys.

> Then again, we may only be learning of those who are (paradoxically) lacking in basic operational security.

History has shown this is definitely the case, both in espionage and crime in general.