$TATBAZAAR has a crack security team who make HMRC look cheerful, and who externalise their lack of being gruntled onto whichever department has drunk the DevOps Kool-Aid and is pretending security doesn't exist. I would find this utterly hilarious to watch if I hadn't myself been seconded onto the front line to unbugger the target of their ire before they get really upset. (I assume there are financial penalties in internal funny money, but that is way above my pay grade.)

Have you tried breaking fingers? Developers can't produce insecure crap if they can't type.