Hmm. Companies tend to react to any security flaws found in their billing much quicker when they are not just reselling flatrate-bought services.