FYI encryption and authentication aren't the same thing. They may both use private keys, but something can be encrypted without being authenticated and vice versa.<p>In this case, if the operators added authentication, without adding encryption, it would prevent attacks, despite the data being planely readable.