I was just looking for the right section to post this.

Yes, this is a gaping security flaw. Glad I'm not using the same password for my Larian account.