A company I worked with in the US used Kaspersky, SolarWinds, and CrowdStrike even after each of those vendors had major strikes or red flags.

Anyone still using SolarWinds after 2021 confuses me. I recall the supposed Tesla source code leak and remember thinking I wouldn't ever buy one after seeig the way the sausage was made.

But with SolarWinds, you don't even have to be able to read code to know you should find a new vendor.