Why does anyone have "access to live passwords"? That point alone calls into question all of their practices, to me...