IMHO pushing open source codec is plain ridiculous. The H264 is a open standard which is widely used. Note that H264 is a sucessor to MPEG2 which is used for 20 years now.
Changes in this area are happening every 20 years and there is a place for only one codec. It is very well standarized and so on. The guys who wants to standarize the HTML 5 doesnt really know what means to standarize over many years and what standards are made for.
Everything goes in the direction of H264 Part 10 (The open one version), even latest FLASH PLAYER is licencing H264 codec from MAIN CONCEPT.
I think guys who are pushing this are just plain fanatics of opensource and they do not understand the openness of standards etc.

Hacking into webmail normally is done by sending email which exploits vulnerability of the web browser.
It's easy to detect the browser USER AGENT, prepare hack (there are many, the browser can run many various code like java, javascript, flash, even adobe pdf, microsoft word etc) and send email and job done.
Actually CEO of that company propably did'nt know that hacking webmail is always easy for experienced crackers.