That advice is good for logicians, not consultants. Clearly it is better from a consultancy point of view to assume all data has been breached and everything that could break is broken and needs fixing.
As spacehome points out, that advice is a logical contradiction (and therefore not particularly suitable for logicians). Absence of evidence is not proof of absence.