Jamie just completed a routine security audit on the company's information systems, and she found several areas of vulnerability. For example, file permissions have not been updated in some time, no comprehensive password policy exists, and network traffic is not fully encrypted. She noted these areas, among others, in a report to Tamika, her supervisor. The report included specific recommendations to fix the problems. Tamika responded by saying that budgets are tight right now, and she could not approve Jamie's requests to resolve these issues. As an IT professional, Jamie is very uncomfortable with the risk level, but she has been unable to sway Tamika. When Jamie discussed the situation with her friend, Ethan, he said, "Why worry about it? If it's good enough for Tamika, it should be good enough for you." What do you think of Ethan's advice, and why? Is this an ethical question?