Agreed, 100% I'm definitely not defending it, just saying the red tape in some orgs can be nearly impossible to defeat. This problem should have escalated as

Agreed, 100% I'm definitely not defending it, just saying the red tape in some orgs can be nearly impossible to defeat. This problem should have escalated as high as needed though to bypass the red tape and fix the security issue immediately. Probably a failure of weak middle management not having the guts to communicate the problem up.