You just have to see how the media says 23andme was "hacked" when actually accounts were compromised using a password spraying attack.