lol. This is true?
Is there any source to check it out everything or read the people comments?

Personally I didn't bought any XPY but this security issue can be a problem for some people...