This is really bad for so many reasons. It certainly doesn’t help their security. And yes, it’s completely legitimate.
