Are you trying to say it was a mistake that allowed the unsigned, non origin checked decryption and upload of all passwords. It looks much more like that was how they designed it.<p>[IANA-Programmer FWIW]<p>Also how is an origin check a fix. Like, great, now only Trend Micro (and any impersonators via DNS poisoning or similar tricks presumably) can read all my passwords in plain text??<p>&gt;It&#x27;s also likely any large company has a chain of command these things have to go down through and back up again and for every link in that chain there&#x27;s a greater than 0 chance the person has no idea about proper security. &#x2F;&#x2F;<p>When the locks need changing in a school it doesn&#x27;t matter that the headteacher has no idea how to fit a lock, nor what lock needs putting on which door; they have an employee who has some competency in the field (caretaker&#x2F;janitor) sufficient to watch an outside expert (locksmith say) perform and certify the work. If the locksmith says &quot;just paint the door with a brick pattern and don&#x27;t bother with locks&quot; then the janitor should realise that&#x27;s not sufficient.<p>&gt;It&#x27;s pretty likely the devs at any consumer hardware company aren&#x27;t world-beaters &#x2F;&#x2F;<p>Trend Micro are a security software company, aren&#x27;t they. From their website:<p>&quot;<i>As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. With over 25 years of security expertise, we’re recognized as the market leader in server security, cloud security, and small business content security.</i>&quot;<p>Like come on. &quot;Global leaders in IT security&quot; can tell exposing remote code exploits across your entire install base is worth paying a not-rubbish programmer to get here ASAP and fix your product.