crunchyoutside

He has never put forth any policy that came out of his own head,

[[ citation needed ]]

Honest question here: what of the parent post do you consider untrue?

Are you saying that any site which does not allow a 27 yobibyte long password is not following current security standards?
I think a 128 character cap is a very reasonable compromise between security and sanity.

According to unnamed “sources close to the incident,” the device was loaded with personal information for dozens of workers.

If they didn’t have whole disk encryption enabled, they should face the full fury and fines of GDPR. That’s just negligent.