The airline is not declaring it lost and does not offer compensation. As usual with contemporary customer service, you only get non-answers and it becomes increasingly hard to talk to a human being that's directly involved with your issue.
Reminds me of the game Capitalism[0] where the player was incentivized to achieve monopoly in markets by selling below-cost, subsidized by the other parts of the business. Vertical integration was also highly encouraged.
Exactly this. Security is more about about defense-in-depth, incident response and recovery planning.
Personally, I assume the hardware is already compromised and plan for recovery accordingly, starting with the worse case scenario. Then, I ask myself "If this thing isn't compromised yet, how can I help it stay so?", starting probably with the network access, through firmware, all the way to the browser.