To be fair, chances are no security breaches have happened because of OIG doing this... yet. It's a disaster waiting to happen, though. Do nothing about security problems for long enough and eventually you'll get bitten.