shaming people for bad security practices is probably net good, whether we like it or not
There is a big difference between "bad security practices" and "someone made a mistake 2.5 years ago"
There is a big difference between "bad security practices" and "someone made a mistake 2.5 years ago"