This is the cost of the "hats off" quick response time to complaints.

The article itself mentions that a patch was pushed within hours of contacting the author. Not much vetting can be done in such short time.