Do they appear to take security seriously? If so how?What claims do they make about the way your data/funds are stored?