It all depends on what you understand the question to be.
If the poster is asking whether there is a regular process to change the codes, then that's not a security risk if you don't tell him the codes (old and new) or the exact dates of changeovers. His follow up question, on that assumption, is for someone to tell him where this process is mandated in official documentation. Maybe he works for a company that doesn't have the resources or departments to manage these things. Or maybe he doesn't work in a country which is as enamoured with Health and Safety and Security as much as we seem to be in the UK and the US (in which case he is very lucky indeed !).
If you interpret his question as asking for the codes, when they change, what the new one will be, etc, etc, then you have identified a risk and it would be dealt with.
As PPRuNe is an international Forum, not everyone will have the standard of English held by a native speaker. Some will probably have a higher standard
With that in mind, it is important to try to understand what is being asked rather than what you think is being asked, before having a rant.
Maybe Toby320 can clarify what he wants to know and why before the handwringing gets out of hand. If he wants something that is actually a risk, then the appropriate action would be taken on that basis.