If the execs and board of a password manager company need to experience a breach to take security seriously, I don't really know what to say.