I once worked in a company and noticed that customer financial statements were publicly accessible. Ran into the software team. And got the reply that no one told them that it should be behind authentication. Some people really don't use their own brains.
If you do, you get into trouble with the hierarchy, all those middle-managers and responsibility distributing committees will be unemployed.