 right without there being real consequences again your your incentives are pretty low and i don't mean that as a as a judgment or as a to cast a stone at these companies if you're the ceo of a bank you're going to cross the regulatory threshold you're not going to spend all your bank's profits on cyber security that frankly may not work or in this case may actually cause the issue so it's a very very hard balance to strike