If they are already good at keeping multiple points of view in mind: that MD5 can be broken for one application, but it still works for others; then they should

If they are already good at keeping multiple points of view in mind: that MD5 can be broken for one application, but it still works for others; then they should also be able to reason that, MD5 might work passably for this application, but it is time to move on.