I'd say that this is just a symptom of using the Cloud, where PHBs have decided that having their own IT people (admins and security) to safeguard things such as this are seen as a burden and aren't required.
I deal with multiple customers, and this seems to be a depressingly common trend.
Biting the hand that feeds IT
