I have this feeling that for every horror story like this, there is a bunch of workers who have voiced their concerns but were ignored. We only hear about the ones that actually get published, but considering management/workers knowledge about the security details for each implementation I would not be surprised if this was true.