For those of us who have been in technology for a while, we have seen some pretty crazy setups from well-meaning people. Largely this is because we have very smart capable people trying to work in environments with limited knowledge. Most were trying their hardest but just didn’t know any better.
Some of the crazy things I saw back in the day were “vlans” that were actually just subnets, firewalls with giant holes in the ruleset, and unrestricted VPNs that were completely insecure. These mistakes were not made by lazy admins, they were made by well-intentioned technicians that didn’t know they were doing anything wrong. All they knew was that things were working smoothly.