Nothing kept them from having an XP (VM) offline just for compilation. It was best practice for security related products (actually for any development) to dev

Nothing kept them from having an XP (VM) offline just for compilation. It was best practice for security related products (actually for any development) to develop and compile offline anyway.