They don’t patch well, and they have short, simple passwords that don’t expire. They have dozens to hundreds of people in elevated groups.