One time I accidentally left in an HTML tag when adding a note on the Social Security website. That page got messed up and would no longer load properly. I just stopped using it since I didn't want to report it and get in trouble. It was shocking that they fail to do even the most basic input sanitization.