Apparently the relevant specs are behind a paywall, so almost no-one who understood security properly looked at it.

This was rather obvious from WEP, no?