True, but this is the kind of bug that one would never want to expose. A smart person (of the personality type to go into other people's private files instead of performing a responsible disclosure to Apple) would ride it out for years and leak content slowly, so that he continues to have unfettered access to the data of the 70 million+ Americans who use Apple computers or phones.

Something like this would be worth millions. It's not something that gets thrown away unless the possessor is just absolutely, completely, ridiculously naive.

My guess is that the photos in question came from a much more basic password guessing attack, which has historically been the case in these high-profile leaks, like the Scarlett Johansson leak that landed this guy in jail for 10 years: http://www.cbsnews.com/news/christopher-chaney-so-called-hol...