It's not about security, it's about lazyness. These are the people who still employ Cobol devs cause they don't want to migrate off existing mainframes. I've yet to see a banking app that was not an objective trainwreck.