And when he does, the blast radius is a single unix box/VM or even a single account. You don't put institutionally-critical stuff on things like this. If it gets hacked, you shut it down, have everyone who logged in during the window change their password, and restore from backups or rebuild from scratch.