The way I read the Binance post[0] is that the first mistake was "Engineer A from Wallet DevOps" clicking on a malicious Google ad[1]. If Google didn't provide that attack vector, maybe this wouldn't have happened that time.

[0] https://www.binance.com/en/blog/community/322915344375956676...

[1] https://isc.sans.edu/diary/32942