[root_axis]

Certainly it could be if security was an explicit design goal. Security is an afterthought for most social media companies since users getting hacked isn't typically a big deal; including in this case.

Notice, for example, that bank accounts are hacked much less frequently than twitter accounts.