Given the ability to completely access arbitrary Twitter accounts using an internal tool, begs the question, how else has this been exploited?