Shouldn't they rather worry about making SSL secure? I don't think I like their attitude.