That's my only point here. Her degree is irrelevant to the point of uselessness for determining whether she's qualified, and whether fault for this incident lies with her judgement calls, or with others.

Maybe we'll find out that she's been writing internal memos for years about the security catastrophes and they've been willfully ignored by the CEO and the Board of Directors. Hell, she has an MFA in Music, so she there's a non-zero chance she wrote them a song about how they'll all be burned at the stake someday if they don't listen to her. This is no less likely an outcome.

We literally have no information to accompany the bare facts of her profile. Hacker News is not Hacker "link to a list of facts with a clickbait, personal-attack title and hope that someone else investigates if they're newsworthy" News. There is no news here without further investigation, and no one has done that in this thread. This should never have been posted as-is.

EDIT: If you were doing a post-mortem of an incident and a manager came in and said "Well, obviously that incident occurred, we let the guy with a Music degree do production work", they'll probably end up being fired under a cloud of HR violations, because they likely have a habit of invoking personal attributes in an inappropriate context. Don't be That Guy. Personal attributes - and optics - are not relevant to a post-mortem. Work behaviors, intentions, statements, and judgements are.