The service requires authentication, but then does not take the obvious steps (industry mediocre(1) practices) to ensure widely known problems with authenticati

The service requires authentication, but then does not take the obvious steps (industry mediocre(1) practices) to ensure widely known problems with authentication are mitigated - let's not blame regular people for the failure of this service to secure their accounts. (1) the bar to do better is quite a bit below "best practices".