A medical record-keeping package was installed at a site of mine recently. Their technician's first step: disabling all firewalls and then sharing the C:\ drive

A medical record-keeping package was installed at a site of mine recently. Their technician's first step: disabling all firewalls and then sharing the C:\ drive of every workstation out across the LAN. Not only for basic functionality, but to enable unencrypted "backups". It's mindboggling that this is the quality one can expect from a $30,000 software package covering -three- seats in 2012.