More likely they are just not as smart as they think they are. These are not serious people when it comes to security.