Clearly shows lack of testing.
If intially good, probably culture & products have rotten.
Not fit to be in security domain, if like this.
I think the evidence shows that no, they aren't.