SOC2 is generally regarded as a joke and has in fact almost nothing to do with software resilience even on its own terms.