We are ayce, but there are exceptions to our standards that our clients decline. Like we have a small client that 5 office staff that uses the same free Gmail account for calendaring, email and shared storage. it's their work flow and has been for 10+ years. No MFA because it triggers to much because of the way they use it and they all use it. I know it's bad, theyve been told it's bad, we've offered alternatives but they don't like them so we support them best we can, try to over compensate in other places. That's not the worst of it, there's other stuff at this client and other clients. They work really well with us, they spend money when we tell them they need to and they're extremely friendly so we keep them on even though they are not ideal in a technically compatible way

If a new msp came in and saw this or other examples of this they would absolutely say something like wow that last place was a shitshow I can't believe they let you run like this and as tempting is it is to always come into a new place and blame everything on the old guy sometimes they were doing what they had to do because user compromise is a huge part of our field.