Does the weak account key in your WCG account allow someone to use that as a password?