It definitely leaves a bad taste because it is completely transparent their concern is not security here and that means they are lying / misrepresenting this to

It definitely leaves a bad taste because it is completely transparent their concern is not security here and that means they are lying / misrepresenting this to our faces - which then raises the question of whether you can trust them on other things. Would you let someone who lies to your face write code for your sensitive internal business systems?