Your remark implies that he is some sort of Luddite with the attitude of, it worked for my grand pappy so it is good enough for me!What the man said is that they did a complete audit of the systems and given the requirements they determined that what they have is the most secure system they can come up with.Your remark also implies that they should be all modern with a nice tomcat stack running