[RIMR]

>it's difficult for me to understand the outrage.

It's pretty simple. Compliance is legally important, and faking compliance exposes companies to extraordinary legal liability. Being lied to about your compliance warrants outrage.

>SOC2 is basically fake

This isn't true, but if it were, it would justify outrage in its own right.

[mgraczyk]

I don't understand in what sense they faked the process. What I've heard described is substantially similar to other SOC2 processes I've seen

And yes SOC2 is fake. Have you ever heard of a startup failing to get soc2 or doing more than a few hours of work to get into compliance?