It's sadly the norm for monopolistic industry-specific software. You see the same lack of due diligence in SCADA software and the like.