The Salesforce breach exposed critical flaws in third-party vendor risk management. When core systems run on black box platforms, financial institutions lose the ability to audit and defend risks.