I think the point with regards to clean code is somewhat changing. As companies and their clients adopt process certifications such as ISAE, static code analysis reporting is slowly becoming a requirement for the release process, driving measured code quality improvement and directly tying it to business outcomes. I feel like some other points are also less severe in technology oriented companies focused on cloud native, continuous delivery and that manage based on the DORA metrics.
I have been involved in the development of systems similar to this one. Typically the systems keeping the data on-site or within jurisdiction do not allow for remote login. Otherwise, keying is done remotely in an area with lower labor costs.