Hacker News Reader

I think even more interesting is that they chose to forgo the rather robust and easy to use API offered by Mailchimp in the first place.

Mailchimp have already exposed customer user data. Controlling the integration in this way is likely more secure, not less.