what's striking to me is this isn't some novel, new-to-the-AI-era vulnerability. We've dealt with the security concerns around discoverable "private" links for 20+ years. There's... so much prior knowledge, art, and discussion.
Given the RIFs and what they've done to engineering culture, I can't help but wonder what else they've done. Like maybe cripple their architectural review processes that might have caught such things?
This is what happens when an important position to head the Leading AI lab of the company is given to a startup marketing guy, who pretends to be an Lead AI scientist, whose biggest credential is to sale the same startup at exhorbitant valuation to the the same company. This is the price for embracing better marketers over real innovators.