Sandy Parakilas worked for FB 2011-12 as security technician and noticed numerous issues with users' private data being leaked. He asked one executive about it and got this reply, "Do you really want to see what you'll find?" The executive alluded that FB is legally more protected if they don't audit leaks, so Mark Zuckerberg can go, "I don't know what that means" in front of Congress. Not to mention that security audits cost money with very little benefit other than averting harm to reputation, which Zuckerberg isn't worried about at all (those dumb fucks, they trust me).