If they were using a server-side rendering framework then what probably happened is that they used HTML comments instead of template engine comments to "remove"

If they were using a server-side rendering framework then what probably happened is that they used HTML comments instead of template engine comments to "remove" the SSN <td />s without understanding the ramifications.