There's no point in attacking the security of a company that doesn't try to provide any.