> We have our own security system, and it has never been breached in more than 15 years.
Which leads me to believe that their system was built by scratch, in PHP, 15 years ago, and hasn't been updated since.