Simply shows that their teams are not in sync with security policies or they don't have one.