I hope they do, but if someone actually used a botnet instead of a simple script, filtering out abuse votes is almost impossible. And even if they managed to do that, it still doesn't excuse using http - no login credentials are sent, but I am not willing to take the risk of exposing my email address to the whole network by entering it on a website that does not support SSL. This is so unprofessional, I wouldn't trust an exchange like that with my Steem.