It should be just as puzzling as any other security / privacy issue. No more, no less.

If a website doesn't take security and privacy as high priority concerns, then they don't want me as a user. I hope to educate more people to feel the same as I do.