>However, "Popular thing possibly has crummy security practices (we just don't know)" isn't HN-worthy, it's just FUD. Bullcrap. Best security policy is trust,

>However, "Popular thing possibly has crummy security practices (we just don't know)" isn't HN-worthy, it's just FUD. Bullcrap. Best security policy is trust, but verify. Assuming that well established businesses have good security practices without doing proper review is what allowed all those fraudulent SWIFT transactions to go through a few months ago. It's perfectly valid to ask why the hell Pokemon Go thinks it needs access to your private email.