Good find, and pretty shocking! What&#x27;s the legal status of something like this? I think in the UK it would be counted as bypassing authentication and <i>technically</i> you could be prosecuted under the CMA (happy to be corrected on that...)