Internet accessible management interface of firewall. There sure is a bleed to this. Eyes of every security engineer bleeding at the absolute stupidity of such a decision.

Just pay the professionals to do their work and not just for a month or two after major incident.

Last thing we might need in scrutinized security environment is some hyped director vibing their revolutionary idea. My money is on their solution being AI, again.