It’s the lack of clarity on how they manage access control for what should be regulated data that surprises me, more than the technology achievement.