This is why you need strict code reviews, and leaders who actually understand the technology. Any competent organization would have caught this.