After I took the time to answer this question, it got closed as too broad.
Some points I couldn't stop wondering:
I agree this is Too Broad.
I also think this should be closed.
What about those cases that do not receive an answer?
I personally feel obliged to point out horrible security flaws when I encounter them because I feel the whole topic gets easily overlooked and if users do not get educated or at least have a chance to become aware of the problems, they just walk away, spreading security issues all over the internet.
While I can see why broad questions are a problem generally, in the realm of security, it might be better to allow them. Commenting does not allow to be as verbose on the problems as I was with the answer before the closure (and as it often needs to be to at least have a chance of being effective).
So my question is: Is it a good (morally) idea to close such questions before OP gets at least a chance to see the underlying problems? Should we rather try to allow users to be educated on security problems?