they are so brazen now they aren't even trying to hide what's going on to anyone who has even minimal network tech skills can discover just how much telemetry they send out and how crap security really is.

like, google authenticator? ya know taht thing? 

yeah, SHA1. yes, the broken one.