‘We found robust, appropriate and secure data handling practices’

Note they didn’t say they didn’t find any slack, inappropriate and insecure data handling practices?

It’s a case of only being as good as the weakest link. It will be a matter of time before they are hacked and the data stolen