That, or, not completely unlikely, he was shown all the vulnerabilities across all old software that banking, finance et al use daily and are unlikely to ever update. I am only half joking. There is a reason I think some people should stick to their areas of expertise.
It currently works because those vulnerabilities are not exploited en masse. With AI, they can. It does change the game.