Too true unfortunately. Security is woefully inadequate all over. Physical security wise, I was able to sign in as "Mickey Mouse" in more than 20 companies without them batting an eyelid and the most common administrator passwords (pc and server) were: