Profoundly is right. it's not that it had weak encryption or some niche exploit. It sent all your data, every last bit of it over unencrypted http. Plain text data transfer. It's nuts.