It could be argued that hard-coded accounts and passwords do not satisfy all the criteria.
By their nature, they are not Found in Five. They continue to be used to this day,
sometimes in high-profile software, despite the significant risk they pose.
There are probably other issues that satisfy all or most of the criteria for unforgivable