I get that they should have used SSL, it'd have been a good move. But you can't seriously use that argument.