@chiefgyk3d @Dan @mastohost i dunno, I made the same prediction about brands putting their Facebook page on their product packaging instead of a bespoke website, yet here we are a decade and a half later and it still seems pretty accepted.

Possibly even preferred, tbh -- you know what you're getting when you visit https://[bigco]/brand, vs spending one of your risky-clicks-of-the-day on some random domain. Just because I think someone makes a good pair of shoes doesn't mean I trust them to adequately run a web property, and it's probably a lot easier for me to fly under the radar with a fake https://brand.tld domain than with a fake https://[bigco]/brand.

Not saying that's my preference to be clear -- just that I don't think it'll necessarily be seen as unprofessional by people in general.

@mainframed767 @gsuberland @jerry I get the sense that, with the recent happenings at Twitter and Reddit, people have kind of defaulted to a position of "the point of fediverse is to have functional social networks without having to deal with big companies".

This reminds me of the old "you don't have to deal with malware on a Mac": that was not the point of a Mac, and was only ever true in so far as malware authors couldn't be bothered to write malware for Macs.

@steveanderson Our new vendor risk assessment contains the following question:

How entrenched will this vendor become in our systems or processes? How difficult would it be to disentangle it if necessary?