One thing is valid. Either Twitter's security model is lame or the SEC's.