No. There's exactly 1 excuse for creating an API which exposes passwords and root execution: It's when it's secure to do it. And 0 excuse for the chain of comma

No. There's exactly 1 excuse for creating an API which exposes passwords and root execution: It's when it's secure to do it. And 0 excuse for the chain of command not understanding the product a company is building. I'm not saying we should tell off support people when this happen. But they have to show solidarity with customers whose security and privacy was exposed by accepting coarse language when it's there.