Comment by aragilar

This feels like the more important takeaway (and feels like an actual security bug), I'm surprised this so buried in the article...