I'm guessing you're trolling, but I'll bite... " given that someone with access to the backend database could probably effect queries ‘simulating’ an active us

I'm guessing you're trolling, but I'll bite... " given that someone with access to the backend database could probably effect queries ‘simulating’ an active user." Yes, in shortsightedland. In a company where storing plaintext passwords is normal, it's not too far fetched to think that they are probably backing up and restoring their databases all over the shop. They only need to lose a laptop on public transport and now they've basically distributed ALL their users common passwords.