When dealing with security issues, organisation typically lost likelihood of occurrence and impact. The impact for these is negligible, so they don’t invent in fixing them. There’s absolutely nothing to be lost if this gets explotes by the ocasional tinkerer.