Fair, but when you call something a security flaw, particularly a gigantic one, you paint a picture that this is not something that should be happening. In actuality it happens frequently because it’s an accepted practice. It’s one you disagree with (and to an extent I do as well), but it’s not a flaw.