Yes, this could be true.i was able to login using bogus account details earlier https://news.ycombinator.com/item?id=7419657