Indeed. And in such a case, the greater risk, legally speaking, is a lawsuit from the employees who are victims of such attacks. The employer can't just claim, as a defense, that their hands were tied because of the ADA.