The same charge can be levelled against those who fail to acknowledge that there are widelyaccepted business practices that are unethical, harmful and wrong.
They apparently have forgotten that there are internationally-accepted best practices and standards for cybersecurity that are widely adopted around the world.