Somewhat surprised at how far you can get down the sign-up flow using the (internet-facing, publicly accessible) staging URLs that the report mentions - i.e. ht

Somewhat surprised at how far you can get down the sign-up flow using the (internet-facing, publicly accessible) staging URLs that the report mentions - i.e. https://www-dev.allizom.org/en-US/products/vpn/ https://www-dev.allizom.org/en-US/products/vpn/ and https://accounts.stage.mozaws.net/settings https://accounts.stage.mozaws.net/settings