@quinn There is certainly something to be said about neglicence in technology, but I would not exclude the infrastructure organisations that created knowingly a single point of failure and handed the trigger to an external entity.
I don't get how this cannot be glaring red in any risk assessment.