These companies need to be treated as the criminal threat actors that they are.