Comment by extc

What's more probable?

a) The developers were this incompetent

b) This "exploit" was a feature requested by the DHS