The fact that makers of those websites are supposedly 'crypto' experts (and should as such probably not be completely ignorant of information security) makes th

The fact that makers of those websites are supposedly 'crypto' experts (and should as such probably not be completely ignorant of information security) makes the presence of such vulnerabilities in their websites more appalling than the same vulnerabilities in your average Joe's webapp.