You don't understand. "Security" is always the goto reason for either changing or leaving stuff as is, if companies don't want to state the real reason.

People are used to ccept "Security" as a reason for almost anything.

I remember once where a MS guy (someone higher up, don't remeber who, is many years ago...) was asked why the Windows filesystems are case-insensitive and stated the reason was security, so that one file cannot be named the same with just different upper/lowercasing letters. Classic deflection.