Thanks for pointing that out. I don't remember reading it before.
But, they own up to the one security hole that really bothers me. As a sysadmin, I know there is always a way for employees to get sensitive data. If a program can see it, so can a programmer.
Their security faq says: "Can Mint employees view my bank account numbers or credit card numbers? Your bank account and credit card numbers are stored securely. Your information may be seen by technical personnel in accordance with specified procedures and safeguards governing access in order to operate, develop and improve the Service."