Comment by FuzzyDunlop

If your site has nothing of real value, then why are you requiring a login in the first place?

Further to that, if someone gets 'hacked' using your service, you've already highlighted that the vulnerability was using your no value service.

Don't skimp on basic security. And show your potential users a little less contempt, too. They are not the 'bozos' here.