Doesn't matter how poor the excuse is
If people are going to try to do it, it needs to be designed around so that they either can't or they can in a secure way.
Just saying that's a poor excuse and they shouldn't have done it is of no bloody use whatsoever when faced with the expense of an avoidable incident.
Biting the hand that feeds IT
