Exactly. Just a few weeks ago I read an article linked through HN about some 3rd party site branded as some Microsoft store, developed in India that stored passwords/credit card/some sensitive information in clear text... didn't take people long to start beating Microsoft with that stick.

Your clued up person may know the difference, but the average person is not that clued up.