yep, but "trust us, we're secure, pinky promise by our internal employees" doesn't really work either.

Don't forget the press releases all saying "We take security very seriously!"

Employees would rather care for their employment and keeping boss happy rather than going against their orders.