I would have loved to be a fly on the wall of the meetings where that policy was designed and approved. Did no one at all speak up and say "hey, running secret

I would have loved to be a fly on the wall of the meetings where that policy was designed and approved. Did no one at all speak up and say "hey, running secret webservers on obscure ports without telling the user is shady stuff"?