I think it’s good to include auth, the issue I take is that they chose the form that is both worst on security and the worst to fix/extend with a better one. I.E. people that actually know about security won’t touch it, and thus it was wasted. They could have done it properly and still been just as easy to instantly use and all, but they didn’t…
2 Likes