Yeah, you're right that was probably a bit harsh given that I'm just running from what I've heard from others, and the fact that last year they were still charging $150 for registration. But who am I to know - I don't want to be one of those token HN trolls who pays out on people for the sake of it so I retract my initial comment.
When we used to have MelbourneIT they sent us an email with our login password in it in a promotional email. When I inquired how they could possibly be properly securing my account when if they where storing my password in some recoverable fashion I got a form letter back stating they followed all the industry security practices. Needless to say I started the transfer of all our domains that same day.
Their exact response:
"Our systems follow strict security measures and only enables us to send the password out to the main email contact in case of password recovery being requested. So rest assured your account password is safely stored with us. "