One that doesn't get proactive security rollouts, it would seem.

I assume it was next on the checklist, or assigned to a different ops team.

The deploys are very unlikely to be managed from the same system.