I am sure, many of the HN users here would have found at least a loophole in similar systems in the course of time. What I do in such situation is letting the s

I am sure, many of the HN users here would have found at least a loophole in similar systems in the course of time. What I do in such situation is letting the service know about the flaw. Isn't that the ideal behaviour ?