As for hijacking usernames: If you are able to wipe and reinstall the instance you likely have the ability to just set my password hash to something else and control my account. As a user you need to trust your home instance.
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
replies: