I have no problem with them working on security in the service of the user. The problem is with them claiming to do that, but instead doing the opposite.