There are at least some penalties for failed security and compliance. Ethics is the first victim of greed.