@BlueBird1827@TwitterSupport Turns out Twitter are absolutely crap at security - #conclusion' target=_blank rel='nofollow noopener'>https://www.bentasker.co.uk/blog/security/667-twitter-screws-up-with-data-it-shouldn-t-hold#conclusion
Went to send them a message about it, and found another no-no on the submission form.