The main issue for me is, the way they react to it. Not only is there no warning about this, but they also refuse to fix it because it would break client support and prefer backwards compatibility over security