Doesn't seem that hard to fix. I'm surprised they don't consider it a security-type issue.