SOC2 compliance is a waste of time | Hacker News Reader