You are failing to understand my point. Companies get hacked all the time, no matter how competent their security practices.

One hack does not imply cardboard box. A history of hacks or bad security practices does, and it’s not clear yet that applies to 23andMe.