It only works because the other provider has a more private implementation compounded with bad security.