[maremp]

The thing is that stuff like exact versions, super outdated software (especially browsers), changing passwords every N days and making it unique is a part of being allowed to pass some kind of security audits.

If you combine paranoid-level security with non-technical and often lazy users, and add cost-cutting all around, you get something like described here.

I know that from my father working in the IT department of a large corporation.