Security practice was generally very, very bad two decades ago, by today's standards, across the industry.

I don't see the point of being so fixated on that.