In reply to mark k..

can you be a bit more specific about the 'unsecure by design'?