I know. It's true. It sucks. It's because money is involved. Plain and simple. The only way I'm aware of the hackers get in is by phishing and by key logging when you open other sites that ask for your password. I'm sure there are lots of ways, but I just never use it anywhere.