Don't really fault them here. Every startup's app is full of hilarious bugs and hacks.

SSL configuration are a pain, especially across multiple sites. Even if you can afford a full dev team, case and point: https://blog.docker.com/