I would fire their entire security team on the spot.

Is it possible to build a security team in a way that you can guarantee to never have any vulnerability ever?