The biggest problem is that they're still doing B but they threw C under the bus (without a security team i don't see a bright future once the exploits come rolling in and when they finally realize C was the option all trust will be gone)