The ARRL released a report to members on August 21st, 2024, and then posted it publicly on August 22nd, 2024, in reference to their IT security incident in May of 2024. I reviewed the document, and have some reactions to it, as well as some opinions on “opportunities lost.” A typical mental experiment I routinely perform is “What would I do if I was involved in the process.” Some of these are opinions I would have given the ARRL leadership if I was engaged with them on the Incident Response team.