> This seems like an incredibly likely vulnerability to me and I am not surprised that even "elite" programmers missed it.

Was that a typo? Seems to me it should be an incredibly UNlikely vulnerability for "elite" programmers to miss it. If you meant that as written I don't understand it; please explain.