absolutely! it baffles me that vanguard is putting people in the position of trusting millions of dollars of their portfolios to username/password and a 'security image'.

if i were a black hat, targeting a place like vanguard would make so much more sense than going after a bank.