> I doubt that more than one or two developers built that

Indeed, and it no doubt passed all the unit tests and was marked as good to ship.

But I suspect what they were lacking was an aggressive, adversarial QA specialist with the mindset of "how would a user break this in daily use".