Tons and tons of self-hosted systems get breached, too: I’ve seen everything from being years or even decades behind on patches, to running Remote Desktop with a weak password so someone could check it from home, to an admin having a bunch of browser extensions on a server, to vendors telling...