Comment by gremlinunderway

Why are you withholding the name of the webmail provider?

Literally the only thing even remotely pressuring these firms to implement better security is bad PR (and it barely does that), so by not being explicit you are bypassing this