How about the idiot employees that cannot exist clicking on the link that lets the malware in.?
LOL, that post did make me laugh. I have firsthand knowledge of this issue. Unfortunately, people are flawed and make poor decisions. We try to protect them from theirselves with varying degrees of success.