The thing is that stuff like exact versions, super outdated software (especially browsers), changing passwords every N days and making it unique is a part of be

The thing is that stuff like exact versions, super outdated software (especially browsers), changing passwords every N days and making it unique is a part of being allowed to pass some kind of security audits. If you combine paranoid-level security with non-technical and often lazy users, and add cost-cutting all around, you get something like described here. I know that from my father working in the IT department of a large corporation.