Agreed re: #1. Anyone who's taken an intro-level security course or had any experience with webdev can tell you that "unguessable" is beyond being an oxymoron -

Agreed re: #1. Anyone who's taken an intro-level security course or had any experience with webdev can tell you that "unguessable" is beyond being an oxymoron - it's a running joke. There's no such thing as security through obscurity. Of course, they do offer password protection for Pro users, and if they're using SSL that's great too; I just feel like "unguessable" is not the best word to use when discussing any aspect of an app's security. As an aside: the <del>mark up</del><ins>review</ins> tagline is fantastic! Really clever.