A Silcon Valley startup with poor server-side security? Couldn't be!