WS-GameOver: 72% of ESBs using weak web services security?

Johannes Ernst points to a study on the primary security mechanism that organizations use to connect web services to their ESB:

WS-Security: 28%

Custom XML tags: 31%

HTTP Basic AuthN: 27%

No security: 14%

Don Smith points out that the Message is the King and the contract is the queen. It would appear that 28% of organizations take some measures to protect their king. If your opponent is any good at chess this is WS-GameOver.