This is obviously not good, but is there evidence that they are broadly worse than the competition? I always thought telco internal networks were full of stuff like this (out of date and misconfigured crap everywhere, with heavy reliance on firewalls/vpns).