Good spot! We are planning to do a full site audit of that stuff, just been too busy with start-up life. We have 6 full time staff and not over a thousand like others.
My point is that if that detail is missed, I begin to worry about other, more important details - such as security and the safety of my data.
Think of it as the "brown M&M test."