You preaching to the pasture here, I worked top financials. They are run by the DS which means 80% of the work is done by 20% of the people, the rest are fraters who get to live out their fantasies of corp exec, rock star, or whatever.
Crypto is now on the client and exclusive to the server. It was always backwards. One comped server was disaster, no clients hold a private key and the combo of both plus the ability to do time series would mean even if there was a compromise only one machine would be affected.