Seems they didn't review their code :-)