Is it just me, or is it ridiculous that their API isn't more protected than this? Most popular apps these days require signed requests, and then store those si

Is it just me, or is it ridiculous that their API isn't more protected than this? Most popular apps these days require signed requests, and then store those signing algorithms in places where they are extremely difficult to get (in Android apps, signing algorithms are almost always stored in native libraries). Tinder didn't even attempt to implement request signing. This, and of course the $1 million investment in the Yo app, just keep piling up the evidence that VC's and even potential acquirers just don't care about how beautiful or secure your code is, even if poor security and code quality threaten the value of the entire business. They just want users, and even that seems to be negotiable if you have a solid background.