These projects are run by volunteers, they don’t have the unlimited budget for designers that Adobe does. And to be honest, it kinda seems like you’re just criticizing them for no good reason. Have you personally designed and built a website that doesn’t suck?

1. If you’re connecting to random free Wi-Fi, you’re leaving yourself wide open to attacks.
2. A lot of security researchers play with penetration testing scenarios like this. It’s how you learn to defend against techniques that real attackers use.