Eh, a massive team makes its own major issues. See the many Google leaks over the years.

Assuming software can be secure (and hence not doing proper defense in depth, limiting the types and nature of information processed, etc). is the bigger issue IMO.