And as one of my co-authors just pointed out to me, we also found a few security issues in mymail, yet they closed them as "not applicable"...