@silverwizard These "shortcuts" are great examples of why compliance != security. I understand the need to meet certain standards in some industries, but honestly it's just a matter of time before you become a headline with these types of decisions.
I don't take them personally and I do try to give my honest opinion, all while being respectful. Some folks will never learn though, and it's not worth the headache at the end of the day. Horse to water and all that...