Web site security improves from appalling to merely bad