just discovered that the security policies that the directors advertise
Ask your directors about this.
You make it sound so black and white. And, maybe it is. However, I know a lot of younger workers may be quick to jump to a conclusion like this, without it being right.
Perhaps the directors are implementing certain security practices that you're fully unaware of. For instance, maybe you don't see certain security implemented on a workstation. However, maybe this is being implemented in a firewall. Or maybe network traffic is being scanned by a third party company, using a "cloud" service, before the traffic even reaches your site's outermost firewall. Or maybe the service is being implemented, but only on one computer (a main "server", e.g. in Active Directory this could be a Domain Controller) and is not being implemented in other computers. In all of these possible scenarios, the directors may be innocent.
Or maybe this is an oversight from something that was implemented, but then the implementation was discontinued but the advertising was never updated. (Or maybe the advertising was updated by some marketing/advertising person who made fresh advertising based off of a feature list, and it is just the feature list that didn't get updated.) In this case, something maybe wrong, but if you come out with swinging fists then you could easily make enemies, whereas asking how something is implemented could result in the directors seeing a problems and deciding to ally with you in efforts to do something that was previously seen as being unnecessarily expensive. The same situation could result in an enemy or an ally, based on how you handle it.
So, to Summarize:
If the company is, in fact, being unscrupulous as your question suggested, then there are plenty of other answers providing solid (challenging, unpleasant, but right) advice. However, before starting any fights or taking extreme actions like jumping ship, make absolutely certain just how bad the situation is. Then, talk to them and ask them about existing plans to make situations right, or if we can start making such plans immediately. If they cooperate, you're ending atrocities and making the world a better place. If they don't, at least then you can have confidence that you did what you could to try to correct situations before leaving a toxic situation.