There also hasn't been aggressive legislation about it until CCPA. Start adding minimum costs for a breach and things may change.