They're talking about internal software for internal users. It can be made insanely secure, but that surely isn't the primary concern in this case.