Comment by DanBC

What's the alternative? It's a good thing that the developer does not give you a false sense of security.

http://security.stackexchange.com/questions/39321/should-i-u...