Thanks. That's good enough for me. So, last.fm gets added to the list of companies that don't care about their users' security but say they do.