> My fear is that they are refusing to do something here because they are a startup focused on growth. Their VCs are undoubtably demanding that growth. It soun

> My fear is that they are refusing to do something here because they are a startup focused on growth. Their VCs are undoubtably demanding that growth. It sounds like a sad conclusion, but really, what are other reasonable reasons not to fix that glaring security hole that affects millions of direct and indirect users?