Absolutely. The biggest risk is the shared password part. It is surprising people still do it.

I am surprised that some of the big eCommerce companies still mail back the password in clear text. Just plain stupid.