Comment by EtherTyper

I still think the governor can be seen as indirectly responsible, since this is a result of insufficient security auditing.