We're guessing engineers were probably too busy checking whatshouldwecallme instead of updating the site's security.