Yeah. Similarly the arguments against Patreon's move are vague enough. Nobody defines what is the objective standard for 'enough security'. Nobody even asks "Why Patreon had a 5-person security team and multiple security vendors up until this point".