Oh you don't want to know how many apps are doing this. People just have no idea.

I wish service providers would force app developers to use strong encrypted authentication channels.