To be fair, some of them are morons. There are morons at any organization of sufficient size. I wasn't on the teams handling security, account login / access,

To be fair, some of them are morons. There are morons at any organization of sufficient size. I wasn't on the teams handling security, account login / access, etc so I can't speak to specific implementations (nor would I), but the folks I interacted with were super sharp.