I wonder why the hell didn't they come up with it since it's the first thing that came to my mind as well and I'm not really security minded apart from trying to avoid the dumbest mistakes. Don't they hire super smart security people with their budgets?