That's how 90+% of script kiddy -type hackings happen, isn't it. That or publically available databases without a password.

AI is gonna make our stuff pretty robust, eventually. The transition phase might hurt a bit.