It has to be extreme malice. Its hard to consider extreme incompetence for a security product of this kind. And then you have to factor in the fact that the code change was authored anonymously and merge by the CTO as shown by @Laser. Sounds dodgy as fuck. View quoted note →