Am I to believe that they all somehow missed these now glaring process errors and amateur code?

It's easy to in hindsight label something amateur code. If you didn't say it before the breach, your words do not have meaning. There is learning to be done. For all of us.