Earlier this week, FTC announced it would use its full legal authority to pursue companies that fail to take reasonable steps to protect consumer data from exposure as a result of Log4j, or similar known vulnerabilities. Now security experts are trying to define what that means for companies' liability.