A gaping hole in Mail.ru?

I read about the gaping hole in mail.ru mail .

It turns out that if I click on the link in the mail, I will open access to all my emails to the administrator of the site I am switching to ?!

Someone can confirm or deny - is it all so neglected?