Even sometimes working inside a company when you see bad security, you can't do anything about it - I made another post about this separately.