Where I will defend an HI for not following code is when they do recommend upgrading "grandfathered" things that involve safety. Pointing out missing GFCIs in bathrooms is a valid concern as long as the report has language like "although not required at the time of construction of this building, current safety standards require GFCI ..." Sometimes they even get those rules wrong though.
