>>What we know about the real world tells us that the answers are probably "yes", "no", and "nothing criminal".

your real world does not match mine, because in my world corp execs routinely ignore the advice of engineers, administrators, and developers when it comes to things like Security....