This is also what we've encountered so far...though it's probably safe to assume at least a few providers have looser security protocols.