Pretty valid complaint seeing how the ARRL is sitting on millions of dollars in dues, yet has no idea how to run or secure a web site or application. Goddamn right the ARRL should feel nothing but shame.
Between this incident and the ARRL shutting their entire site down for a week to perform an upgrade (dev environment, anyone?), I have very little faith in the owners nephew or whoever is running the web services.
If you can't run a website, take the millions of dollars in dues you get every year and hire a cloud computing company to run things. The status quo is untenable.