Isn't it toxic to brag about it online like he does? It wasn't a feature many were even aware of, but instead of placing it as responsible disclosure, he places it as: "I ruined it for all of you, but I had a lot of fun doing it".