Funny how there is a post-it with a password glued to the screen of the computer in the lede image, now in plain sight for thousands of readers.
replies(8):
OP might not be wrong, but let's at least follow SOP for disclosing security failures (30 days pre-disclosure)