Frankly, if there were VMs and sandbox deployers at the degree we have now, I'm sure widespread simple demos of "Look, here's what this old code would've been doing to your precious database" would've changed minds right the hell quick