01

Deliberate security

Passwords are hashed server-side and session tokens are stored only as digests.

02

Predictable names

Canonical account names prevent ambiguous URLs and case-only impersonation. ViGet uses this exact name as the package publisher; it does not create a second identity.

03

Service boundaries

Products request explicit account access instead of sharing hidden application state.