Startup's security policies are concerning