I didn't infer any judgement being made. I read it as an example of a common level of security knowledge, not a criticism.