Dan Q wrote a nice piece about poor access control for a recipe site. I happened to come across the same thing the other day on delish.