@Gargron Runescape has taught us well, to never fall for this.
On a more serious note: holy, that is one big security issue they need to fix. Looking forward to the write-up.