> This was a bad breach, for sure, and we may not fully understand its scope at this point
> I mean, emphasis on able to, as in "in theory, based on what I know, it is POSSIBLE", not that they did.
When you consider the potential implications, and possible scenarios, from a security perspective you have to assume that they're not just "possible" but a reality.
If you find a zero day exploit, you don't just ignore patching it because "well nobody else probably has it".
> I mean, emphasis on able to, as in "in theory, based on what I know, it is POSSIBLE", not that they did.
When you consider the potential implications, and possible scenarios, from a security perspective you have to assume that they're not just "possible" but a reality.
If you find a zero day exploit, you don't just ignore patching it because "well nobody else probably has it".