iGoogle Security Hole?

Someone needs to verify this – but from where I sit, it’s reality!

Some one visits my blog from a link on their personal iGoogle Page.  That gives me a link back to their iGoogle.  I click that link, and I get someone else’s personal iGoogle page.

For example, I just tried this on a hit from India, and all of the links on the iGoogle page were to Indian sites.  Definitely NOT my iGoogle site (I have one, I just don’t use it).

So is this a security hole?  I can’t see GMail, or other services that require an iGoogle login – but I can see what widgets and RSS feeds the person subscribes to.  Is that a security breach?

I guess it depends on what you subscribe to.

Wondering if anyone can validate what I am seeing?