we in security teams can only dream of such incompetent management

zero CVE policy = halt on business development.