Yeah... I didn't fully appreciate just how insane this is because the information's scattered all over the place. Then I read the Register article and a collated Twitter thread... and yeah, it's insane...
This company has absolutely no business being anywhere near security/software/hardware development.