Most cybersecurity conversations place the burden squarely on the user. Stronger passwords. Better two-factor authentication. Don't click suspicious links. That advice is sound — but it addresses only half the threat model. https://dev.to/mitchmarsh/they-didnt-hack-your-password-they-hacked-facebook-itself-52e6