I love the egotistical assumption that they have a bad Infosec policy and don't have VLANs based on basically one sentence.

Here is one: "They connected computers to their network" The assumed security risk are endless and 100% of companies do it!! Such idiots, to connect a computer to a network!