Comment by ef4

They take HIPAA seriously (because there are fines), but that is definitely not the same thing as taking security seriously.