Just because someone "works in IT", doesn't necessarily mean they're an IT Person. Everybody these day is in a rush to - offload responsibility - the cloud because it has been marketed - to death - as the be-all and end-all solution to keeping those damn expensive and cranky IT types on staff. So ultimately nobody is minding the store because everybody is told security is the other guy's job - the properly trained people have all been sent away - And it's all perfectly safe in the cloud... Right?
Yeah, or not..
The private forum has to be private, because it has a sign right there that says it is … And nobody is going to have the audacity to just walk (into Mordor...) past a sign...right?!?
I see it all too often, somebody in middle/upper management wants it to be so … So they mandate it as such, and if nobody is there to explain why it dangerous/stupid it gets pushed through.
*Sigh* Low hanging fruit by fiat.