Funny, I for one would not want to do business with a company that puts their customers' security and privacy as second class to a developer's whims. Would that developer take the fiscal responsibility if something should go wrong? Probably not.

Don't get me wrong, if there is a true business case and the solution chosen has been properly vetted so that a "company" can realistically take responsibility for the actions of its employees, then fine. But there have been too many cases of company (and government agencies) not taking this seriously enough.