If big tech can't safeguard itself, can it protect customers