Comment by revelation

There are security issues, and then there is this.

Not doing authentication on some things isn't a "oh shit" moment, it's a "we're doing all of this very wrong" moment.