Do you really need SOC2 compliance? If a customer problem is big enough and underserved, could you start serving customers without it? Or is it a way of potential customers telling you "no" while being nice about it?