The point was more about the reaction of the rep, that it was ludicrous of me to consider passwords to be case sensitive, but yeah, not a good sign in general, though as I use a unique password for everything (1Password) I'm less concerned.

Related, the "3d secure" credit card verification system asks for individual chars of a password (at least in the UK).