Yes. Along those lines, one of the comments to the tweet above says “the probability that any entity who has decided to hold a large store of sensitive private data was ever honest enough to want to protect it tends to zero.” and I think there’s a lot to be said for that.