The theme of this week has been
"damn we made a mistake 2 years ago, I guess we can't ever fix it"

and then me stubbornly deciding to force people to fix it

fun fact: the security team can't get a ticket in the sprint. but they can get a high priority issue to override sprint priorities as part of an incident postmortem.