To be honest, Twitter didn't manage expectations. If I register on such a platform, I expect my mail/pwd combination to stay reasonably safe. Reasonably, becaus

To be honest, Twitter didn't manage expectations. If I register on such a platform, I expect my mail/pwd combination to stay reasonably safe. Reasonably, because there is never a guarantee. The rest of these expectations are entirely on the users. If people take security as seriously as they proclaim, they should not have registered. To now demand meticulous access controls sounds a bit neglectful to me...