It wasn't/isn't just them. It wasn't a massive secret either.
https://news.ycombinator.com/item?id=32077583
The test of all these security exploits are in the exploiting. In practice, you can run wild and nothing will happen. My HN password was 000000 for years.