It really worries me when I stumble across an insecurity in a website. I don't go looking for them, but when I find one, I feel like I have a responsibility to do something about it. I don't mean tell the world about it - that would be bad for the company...