a little harsh maybe....developers make mistakes...probably just forgot about it while trying to get the initial release out the door.... its not like tumblr is a bank or the DoD
Saying security is less important because it's not a bank doesn't make sense because it's issues like this that can cost a company it's existence.
It is a problem, just saying that I vote the developer keeps his job cause i like tumblr