Thanks for the link. Again it says
1) ‘doesn’t belong in private business’ ==> MAD (or close to MAD) as in the two Dutch companies case
2) up to policy makers ==> PoloSec’s scenario comes true