I wouldn't characterize a collegial inspection of key security/durability features a website should employ as mean-spirited. Considering that there's some low-

I wouldn't characterize a collegial inspection of key security/durability features a website should employ as mean-spirited. Considering that there's some low-hanging fruit still to be plucked, it's better for someone to point them out, and demonstrate the necessity to close these easily-leveraged gaps quickly, rather than to leave them open for someone much less scrupulous to misuse.