<i>You may feel the security flaw is an obvious red flag that should have peoples&#x27; hair on fire but not everyone understands what you do.</i><p>Horseshit. Having a <i>publically-exposed</i> HTTP endpoint that enables arbitrary code execution is so goddamn stupid that even an intern with room-temperature intelligence should&#x27;ve been like &quot;Hey, isn&#x27;t this a possible vulnerability?&quot;<p>I&#x27;m all for the principle of charity, but if you are in a field where people are counting on you not to be a rank amateur then you better step up your game and not be surprised if they call you out on your incompetence.<p>I&#x27;ll humor a kid who screws up carving a turkey--but if they claim to be a neurosurgeon, they damned well better have a steady hand.