

After nearly two decades working in IT companies, I can see how someone could discover this issue and notify someone else, but it was never properly escalated and addressed due to ineffective internal organization. I don’t mean to defend them, but I don’t see any reasonable explanation for why they would have done this intentionally.






That doesn’t contradict what I wrote, though. I can see how some manager who didn’t care enough or didn’t understand the implications would accept this half‑assed measure somebody suggested on slack.
I mean, they should be criticized and shamed for what’s happened, but I see no evidence of malicious intent.