I just did a Google search on another user ID I use on some other forums. One of the hits goes right to the Heatware profile page for me and it shows my email address and allows someone to click the Edit link (but, at least, the current password is required to submit changes.)
This isn't good.
This isn't good.