Even thought it really is a bad situation to be in, I don't believe this is something SE could work against, is it ? Since its more of an IRL thing (getting the password, the code, etc) there would be no proof of it happening. I don't think they could do much.

Maybe I'm wrong thought, and to be honest I do think it is something we should be able to do something about. But I guess getting tangible proofs would be difficult ?