Don't use that then. Tell that vendor their security posture is bad.