I concur. I once wrote code (happily long since retired) that stored credit card numbers unencrypted.

It wasn't about cost cutting. It was about me being young and foolish (and, looking back, I'm not sure it's even the stupidest mistake I've deployed to production in my career, but I'm not sure I want to admit to the other candidates just now :).