Re: @Mongo - Yet again poor design and great hacking reveals me as a muppet
"The real muppets are the ones whose poor programing practices allowed such things to happen in the first place!" -- Graham Marsden
I disagree, they are merely inexperienced graduates and/or other noobs. Or, quite often, they have already raised concerns only to have them airily dismissed. The real muppets are those who actually have the power to make decisions (which, in practice, always means budget controllers) on hiring, testing, and quality control.
Even a single, highly experienced and or qualified software/security engineer attached to one or more of these teams would make a difference in quality. The difference that 1st level management see is a 1% increase in their budget, so they demur. But even these managers are relatively blameless: they know that, whatever they say, those above them see only $ signs, and that if they are seen to increase their budget by 1% they are automatically regarded as failing, as no justification would be understood (to be honest, even given an audience) by higher management.
This status quo will continue until those at the top suffer financially or legally. They cannot be allowed to continue to micromanage budgets all the way down and then shrug their shoulders at the almost inevitable consequences.