But you'd go to a competitor who hasn't published a blog post, whose internal code you haven't audited and simply presume is just fine?
In plaid's defense, lack of performance tuning isn't necessarily a lack of security focus.
Come on, this is not about "performance tuning", where you're trying to eek out every last drop of performance - it's about a completely indefensible, complex, wasteful solution to a simple problem.
I'd say engineering insanity at this level is very worrisome for what they've done at the security side of things.
Some people think you can just write software, sell it to customers, and it's "tuning" to make it work properly.
You should be fired from whatever job you have.
My guess is that you have no job, you are fronting USD.
In which case you have absolutely no place in this conversation and you should be ashamed of yourself for speaking up.
A fool and his money are easily parted.
If you don't want to be banned, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future.