I worked with a GM years ago who ran a 400-key resort in the Caribbean. Beautiful property. Open-air lobby, palapa roofs over the pool bars, thatch accents on every building. Guests loved it. It looked like paradise. One afternoon he walked me through the property and pointed up at the roof over the main restaurant and said, "That's the most beautiful fire hazard I've ever been responsible for." He wasn't joking. He'd been asking ownership to invest in fire-retardant treatments and suppression upgrades for two years. The answer was always the same... it's too expensive, the insurance covers it, we've never had a problem. He told me, "The day we have a problem, there won't be a building left to have a problem with."

That's what happened Friday night in Bayahibe, Dominican Republic. The Viva Dominicus Beach by Wyndham... over 600 rooms, running at 84% occupancy... caught fire and was almost completely destroyed. One guest, a 46-year-old Italian tourist, died. Three more were hospitalized. Six others were treated on scene. Roughly 1,700 guests had to be evacuated and relocated to other hotels and nearby housing. Dominican authorities say the fire spread through palm thatch roof structures, pushed by strong winds. The cause is under investigation, but the mechanism isn't a mystery. Thatch burns. Wind spreads fire. And when your building materials are essentially kindling with a view, the margin between "small kitchen fire" and "total loss" is measured in minutes, not hours.

Let me be direct about something that the press coverage is going to dance around. Thatched roofs and palm-frond construction are an aesthetic choice that guests associate with the tropical resort experience. They're also a known fire risk that has destroyed properties across the Caribbean, Mexico, and Southeast Asia for decades. This isn't new information. Every operator running a property with significant thatch elements knows this. Every insurer knows this. The question is always whether the cost of mitigation (fire-retardant treatments, enhanced suppression systems, compartmentalization, emergency egress upgrades) is treated as a real line item or something that gets pushed to "next year's budget" until there is no next year.

Here's what I know from 40 years of this. The insurance will eventually pay out (probably... and the claim process on a total loss of this magnitude with a fatality will be brutal and slow). The sister property next door is still operating. Dominican authorities are saying tourism continues as normal. All of that is true and all of it is beside the point for the operator. What matters is this: a guest is dead. A building that was a going concern at dinner time was rubble by morning. And somewhere in the chain of ownership and management, there were people who knew... or should have known... that the speed at which this type of structure can be lost is fundamentally different from conventional construction. Every resort operator with thatch, wood-frame, or similar construction needs to look at three things this week: your fire suppression coverage (not what the certificate says... what actually works), your evacuation plan for full occupancy at 2 AM (not the binder in the office... the drill your staff can execute in the dark), and your building materials assessment relative to your insurance requirements. If there's a gap between what your insurer assumes about your construction and what's actually on the roof, close it now.

The Dominican Republic attracted 5.6 million visitors in the first five months of this year. This is a massive tourism economy, and this fire isn't going to stop that. But for the individual operators in Bayahibe and across the Caribbean, the lesson is simple and it's one I've seen ignored at a dozen properties in my career: the thing that makes your resort look like paradise is sometimes the same thing that can take it away in an hour. You either spend the money on mitigation or you bet that it won't happen to you. That family in Bayahibe just found out what happens when the bet doesn't pay off.

I grew up in hotels where my dad hosted governors, senators, regional power players... the kind of events where the security team showed up with earpieces and a floor plan and everyone at the front desk pretended it was totally normal. And every single time, the conversation was the same: secure the ballroom, secure the entrance, credential the guests. The perimeter was the obsession. Nobody talked about the person already sleeping in room 614.

Saturday night at the Washington Hilton, a 31-year-old man armed with a shotgun, a handgun, and multiple knives charged a Secret Service checkpoint during the White House Correspondents' Dinner. One agent took a round to the vest and survived. The suspect was a hotel guest. Let me say that again for every director of security, every GM, every brand executive who's ever approved an event security plan: the threat was already checked in. He had a room key. He'd walked through the lobby, ridden the elevator, maybe smiled at the front desk agent. He was inside the building before the magnetometers were even set up, because that's how hotels work... you're a guest until you're not, and by the time you're not, it's too late.

This is the tension that no brand standard, no SOP binder, no "enhanced security protocol" press release is going to resolve cleanly. Hotels are, by design, open. That's the product. You walk in, you're welcomed, you belong. A hotel that screens every guest like an airport isn't a hotel anymore... it's an institution. And yet. A property hosting an event attended by the President of the United States had the shooter sleeping under the same roof, and the current model treated him as a customer right up until he pulled a weapon. I've sat in brand security reviews where the conversation is always about external threats... the uninvited person, the crasher, the protester outside. The internal threat... the person who booked a reservation specifically to be inside the security perimeter... that's the scenario nobody wants to game out because the solution set is ugly. It means guest screening. It means restricting access within your own building. It means potentially turning away revenue. And nobody at the brand level wants to write that playbook because it contradicts everything hospitality is supposed to be.

Here's what's going to happen. Brands will release updated event security guidelines within 90 days. They'll use phrases like "enhanced vetting protocols" and "coordinated law enforcement partnerships." Some of it will be meaningful. Most of it will be theater designed to reassure ownership groups and event planners that the brand has "addressed" the situation. The real change... if it comes... will happen property by property, GM by GM, in the specific decisions about whether to sell rooms to the general public during high-security events, whether to install interior access controls between guest floors and event spaces, and whether the cost of those measures (in both dollars and guest experience friction) is worth the liability reduction. I've watched three different flags handle security incidents over the years. The pattern is always the same: crisis, corporate memo, new SOP section nobody reads after 60 days, then back to normal until the next one. The properties that actually get safer are the ones where the GM takes it personally and builds it into operations regardless of what the brand memo says.

President Trump said the incident proves the White House needs its own ballroom for events like this. Maybe. But that solves the problem for one dinner a year. It doesn't solve it for the thousands of hotels hosting high-profile corporate events, political fundraisers, galas, and conferences where the security model still assumes the threat is coming from outside. The Washington Hilton just demonstrated, in the most public way possible, that the threat can have a reservation confirmation number. That's a different problem. And it requires a different conversation than the one this industry has been having.