No big surprise
I still find that there are lot of companies with zero comprehension of internet protocols and their caveats. It's not exactly an uncommon thing to see people using FTP or Basic Auth for HTTP websites and then having to explain why they might want to use more secure protocols such as SFTP, FTPS or HTTPS for these types of things to at least get some basic level of encryption on there. Mainly seems to affect smaller businesses as larger businesses will have their own IT department that most of the time will have at least one person who is security aware/conscious. Smaller businesses still make up a significant amount of services online.
Biting the hand that feeds IT
