I'd say they are not very risk averse if they are still using IE6. In fact, I'd say they are living on the edge. I hope the CTO has a really nice golden parachute because they will need it when (and not if) the proverbial poop hits the proverbial fan.