I had one fortune 50 client who told me I was overstating their risk. They tried proving me wrong but couldn’t.
A month later their security officer watched someone change settings in their firewall from within the system and email data back to china.
That is chilling. What a helpless feeling.