&gt; ignoring the fact that this backdoor survived for 3 YEARS of code reviews<p>While I don&#x27;t disagree with the rest of your comment it&#x27;s possible that this portion of the code was only reviewed once (if at all) during the entire 3 years whereas your comment makes it sound like it was constantly reviewed over the period of 3 years.