Comment by Jenk

It's actually PCI DSS that has propagated some of these bad practices.