This may shock you but Adobe is shipping insecure software. No, it's not Flash this time. Nope, not Acrobat, either

Mobile app SDKs sport dodgy crypto defaults, set bad examples - updates available

It has been revealed that Adobe's Experience Platform mobile SDKs, used to create apps that interact with the company's cloud services, until recently contained sample configuration files that created insecure default settings."