> Uh, who determines that the infrastructure wasn't properly secured?

ShinyHackers, obviously.