@SteveBellovin@infosec.exchange Yes! Or as I like to say, you don't have to protect what you don't collect.