What about ransomware + spyware where you just lost account numbers and IP?
Just stop. There is zero reason to be reckless with infosec and IT infrastructure.
Sometimes things will exist outside of your control but that’s a long shot away from “whatever, it won’t happen to me”.
"whatever it won't happen to me" isn't my point, but okay. I'm not advocating for recklessness or apathy toward infosec / IT. I'm not trying to tell anyone how to live their lives, and explicitly I'm not saying what a company should do. I'm just trying to convey how I view MY risk from a target probability perspective vs the loss it would incur, and thus how I decide to trust some HW/SW
Not sure why you're trying to strawman me here, no need to be hostile