People seem to be missing that they have a private account part, protected by ssl, probably for services aimed at business owners. That's the reason for this notice.<p>And the author of this thread's title is wrong, the fact that they don't use OpenSSL does not mean they do not use SSL at all (as proved).