Absolutely unacceptable. If anything, the reset password instructions should have been sent, and nothing else. On the other hand, Apple now has an incredible P

Absolutely unacceptable. If anything, the reset password instructions should have been sent, and nothing else. On the other hand, Apple now has an incredible PR/customer relations opportunity. Could you imagine if Apple cam back to him with free products, free .mac (mobileme) subscription, and a team of people to help re-secure his information? If that happened to me I would feel that they did their part in restoring my confidence. I doubt this is an exploitable loophole in account security as much as it is simply a fluke or blunder on behalf of one man in a customer support center.