This 3rd party software company fucked up

NO.

Clowntrike didn’t fuck up. They offered an externally-managed service that people allowed into their network because they didn’t really clue in how monumentally stupid this is. You’re blaming the gas station for blowing up your car or the leopards for eating your face. Customers who actually gave them money - the people who struggle with “that’s hot, so don’t touch it” - are a dime a dozen, and clowntrike was just taking advantage of the stupid. This has been the American way since snake oil salesmen during the gold rush.

We fucked up by not watching our stupider techbro friends better suited to a ward somewhere than a c-suite job. We should have been ridiculing them mercilessly so their shame would make them choose better.