> it doesn't even feel like they tried.

I'm sure they tried. "they" are probably security engineers and in my experience such people have a very different idea of what makes good UX