The whole point is that the job could have been done a lot differently and a lot better. Like UTI99’S approach, your similarly dogmatic approach isn’t a progressive one, and if the security firm continue with it, it will only lead to further problems down the line.
