How much would you tell your manager?
Someone hacks your server and gets into Adobe with ransomware because it's not managed properly, next week you'd be complaining about how stupid Adobe is.
Are you storing client names on this server?
Can it be DDOSed?
It will have to pass audits.