I think you're right. Their word choice about security ("ridiculous" security) seems to be a wink-wink-nudge-nudge touch. In other words, it looks knowingly negligent, and I wonder if that could have legal consequences?

I didn't realize this was a US company because of the awful website copy. The content is just appallingly bad, and seems more like something fit for a web squatter or an eastern-European warez site.