Still better than no testing at all. They weren't securing any of their SQL queries. I made a more secure app in high school!