It seems to me that the main problem with Solar Winds was that that the financers behind Solar Winds (aka Bane Capital) was buying up security firms with the goal of creating a category killer.
Bane used this model in other industries and have creates a great deal of harm.
The industry consolidation created an environment where a failure of the "category killer" company led to a more serious data breach.
!WINEX
RE: Debating the SEC Charges Against SolarWinds CISO