The fact that it happened at all (and without McLellan being proven guilty of anything!) is indicative of a severe security flaw in the banking system.