People did risk assessments with VMWare and we see how that turned out.
Things can change, just because you make your risk assessment doesn't mean you should ignore that there is still something in that contract that could turn on you just as easily.
Should we go back 10 years, maybe the risk would have been the same. Did Sony do any of these things then, but the policy was the same. How about 10 years from now, just because of your "risk assessment" doesn't mean that Valve is suddenly safer, just just means so far they have been safer.
I am not saying don't use Valve, but there is zero reason to believe they could not just as easily do this.
Nobody is arguing the risk values are exactly the same. The argument is that the risk posture is the same. You're taking a pretty rigid stance that the only thing that matters is risk value, which is an individual value judgement and thus incredibly far from an assumed fact. Some people do care about posture more than value and different people weight value differently as I'm sure your thousands of assessments have uncovered.
In any event, I think with all the data you'd see that Value has also removed games from its platform. So I'm not sure the value gap is even as wide as you seem to be implying.
>Nobody is arguing the risk values are exactly the same.
please re-read the part i quoted from the parent, where they say it's the same risk.
>You're taking a pretty rigid stance that the only thing that matters is risk value
i did not say "the only thing that matters" anywhere.
you, and the parent, are reading something into my comments that i have not written. the only thing i said is that the risk is not the same because sony has a pattern of behavior worth considering.
it's not the same overall risk though.
accurate risk assessment includes past incidents in the calculation. sony has a demonstrated pattern, valve does not.
if you choose to ignore past behavior in your risk assessments, you are doing it wrong.