Best practices for Meteor
Is the insecure package still in .meteor/packages?
Does the project have the mdg:validated-method package?
Are the collections wrapped in a class with define, update, and removeIt methods? See CareerGoalsCollection.
Does the class export a singleton?
Are there ValidatedMethods to define, update and remove documents from the Meteor collections?