Even more if one is sending out hardware-devices. It's pretty clear that the folks over there came from the Web-world and more frontend than backend and didn't follow industry-wide best practices at all.
I hope they have a good lawyer, because there will be one that sues, i'm pretty sure.
