Comment by saidnooneever

Clearly they don't do security audits of their own code and dependencies using their own product xD