South Korea has(or had, they may have changed it in the last few months) a law that enforces the usage of ActiveX for everything which needs security (e. g. online banking, online shopping)
The incompetence was in mandating a certain implementation instead of writing a technology-neutral law requiring a certain security level.