Could be. On your first note, I highly doubt that though. I worked at big companies who provided "cloud" services and I NEVER accessed customers' accounts. Your second explanation seems more plausible. I presume that's possible... Unlikely, but possible.