It’s not as bad currently, but 10 years ago it wasn’t that unusual to find things like government and bank websites using freaking ActiveX.

These days I would imagine it means things like not publishing videos with (only) proprietary codecs, or using some sort of non-standard non-open 2fa or something.