This is being too much black pilled about Cyversecurity.
It is not like India specific issue; 10 years back there was not much focus on cybersecurity but not just limited to India. pretty much all of our clients, US/EU/Japan were ultra soft on the policies.
Heck! one could even walk in with a personal external HDD and copy whole company data and move out in evening without anyone catching anyone.
When I joined work, Desktops used to rule the offices, barely 10% had laptops. All the ports used to be open, you could connect your phones, pendrive, HDD, etc.
People used to store movies, tv series, on the drives and share the path with each other's. Few systems could run torrents too.
Copying data between client network and our companies network was enabled for long.
By 2016, there was a security drive where they disabled ports in laptops and desktops for personal use. later they disabled shared drives and then scanned drives for personal media.
Later, disabled installation of any kind of softwares. you have to request for license first and then raise request for installation.
There is no admin access given anymore to anyone.
These things have not present in most companies private or public. All kind of InfoSec and Cybersecurity policies are available.