While this may be true they need to step up the security as they make money from people and since I joined almost 3 years ago, I've not seen much of an improvement when asked to step that up. We can be very thankful that they use a 3rd party company to process payments for the subscriptions otherwise we'd be "up shits creek without a paddle" as they say.
They make enough money from the subscriptions to make more improvements/updates and if they were really smart they could use someone(s) with the programming knowledge as well as a gaming aspect to really get it secure but again they don't care and made that clear.