Someone isn't understanding where to escalate this, maybe because of the working conditions at Trend Micro suggest that some low level developer would be blamed

Someone isn't understanding where to escalate this, maybe because of the working conditions at Trend Micro suggest that some low level developer would be blamed for this. It's definitely not a developer's fault this isn't audited, and probably not even the product's manager. Seriously the CIO should be fired for this. It's really that unacceptable. It's not just one attack surface exposed by this.