> Maybe spend less time creating stereotypical customer profiles and more time securing your infrastructure

This person needs to understand that Monster is in the business of selling energy drinks, not storing secret information or managing critical infrastructure. The fact that they have their own branded cyber security training is actually better than most. I'm not saying their infrastructure couldn't be improved, but chill out. They likely operate with a higher risk tolerance compared to other organizations so yes they're probably more exposed.