True taking-the-advice-of-big-tech-security-consultants has never been tried.