Comment by nopassrecover

Agree with you, though potentially easily remediated if that third party provisioned for the “+” convention.