If this is true, report it to twitter. Their security team should know about this.

There is nothing in the page that tells you this and that is a security hole. A big gaping security hole.