I'm willing to bet they have not gotten this tested by security professionals