Non-profit organizations are not inherently responsive to the communities they serve because they generally lack a customer-feedback process.

“non-profits tend to not have these adverse profit incentives where they hollow out their standard and create a race to the bottom but they're also not at all responsive by default to the communities that they serve because there's no process they don't have customers that they serve where they go and ask what do you want what do you want what do you want and when you look at the overall satisfaction with the security standards today”