Re: Security is critical, but
I don't want to be called a "Tech Lead" when this crap exists. I don't want the FBI holding me for questioning when all the data and money is gone.
Document it and forget about it. If you have told your management, in writing, and they decide to do nothing about it then it is not your problem any more. They can do the explaining.