Surprised there aren’t more denial of service attacks on Fidelity customers. If you known/guess user name it’s trivial to deny someone account access.