As for Sarah, she was let go, not for being a malicious actor, but for her lack of attention to digital security best practices.