because p=oblem (1) above is not completely solvable, they need to have a plan.=Part of it is technical (do continuous code auditing, pentesting, on board p=oper crypto people, etc), the other part is legal/financial and pr. Specifi=ally they should have some kind of insurance and they should have a pr disa=ter recovery p