Ok, could be. If thats the case then bounty can be higher. Im not so up to speed. But one would guess they do some pen tests. It's always better to fix it before it's too late. Question remains, where is our security officer in all of this