Pretty much.

I worked in tech and there's a lot of morally gray things.

For example: the law is pretty clear on what a company should and shouldn't store as data. Yet every year, tech companies violate it. A few even get lawsuits because of how bad they did it. Thousands don't.

The engineers (many who only want to do the right thing) see it pretty clearly. Don't leak shit. Don't give out personal info. Secure that shit. Extremely clear guidelines.

But, from our higher ups, we are constantly told "ah that doesn't apply to us" and follow whatever the marketing/analytics/data team wants.

Been this way for decades.