@Nepiant @quad like, imagine one day you're competing in CTFs or reading up on the latest CPU vulns or some other novel difficult exploits that require immense skill to pull off
And the next day you go do pentests for a customer whose webapp uses outdated libraries with known vulns, and also has a mongodb with default password exposed on the internet, and holds the door open for you despite not knowing you.
And you know that most companies are like that