Comment by notpushkin

Which indicate that the management wants to feel good, not that the app developers care about actual security.