>But not authenticating your encryption can lead to worse issues. A type of attack called padding oracle attacks can let an attacker obtain the encryption key by sending a large number of specially crafted packets.

I believe that's wrong. I don't think a padding oracle attack will leak the key. It will leak the plaintext only.