That's an asinine statement to make and suggests a lack of common sense.
Any website can be compromised, even if only for a short time and zero click zero-day vulnerabilites exist. Companies are not the only ones at risk from this or the only ones with something to lose if their system gets compromised.
Common sense is important but not enough (and evidently not common enough).