Heh, Yes on re-reading the comment it does sound ironic. :)

Our IT is not purposely keeping a security hole open to boast about uptime. If there was a security impact to our particular configuration/use-case, we'd patch it for sure.