It really can't be understated how many non-profits operate on a shoestring budget and over-extend that few staff they can afford as a standard operating procedure, and have very low technical skill among everyone as they're mission-focused with what little resources they have.

I've worked with and for a couple non-profits where IT help was someone's spouse or kid or brother willing to help out. Often I've been the spouse. Often a shared Google drive filled with poorly managed PII is the solution that works well enough...until something bad happens.