Maybe its just that they don't understand what they are doing, I don't want to place blame on somebody for doing something unawares. But it is extremely important nowadays to keep an eye out for these kinds of things.
You know who you are. I see what you're up to.
This is what "https everywhere" is for.