You don’t have to be an idiot to be hacked. A legit extension can be sold or compromised due to no fault of the engineer

Don’t attack individuals for mistakes of a system.