Don’t get me started on security policies of large German (non-tech adjacent) companies - so many of them are still stuck in the 90s