Security lapses is still sadly not a fireable offense. It has to be either money related, criminal, or something deeply embarrassing. More embarrassing that being a public anti-semite (like another tech CEO not yet fired by their board).
In most cases Im not a fan of heavy handed IT security but in this case I'm not sure there is anything they can do to add address security concerns in a sustainable way. Eventually somebody will jailbreak one of these and dump ALL the chats or something catastrophic like that .