“Linear deliberately postponed obtaining SOC 2 compliance for its first two years, accepting the loss of some customers to focus on higher-priority tasks.”