Considering their methodology of selecting for the lowest performing engineers and specifically NOT asking half of them to secure the passwords, I'm encouraged that their numbers were as good as they were.