Why would access to the source have helped here? Presumably the code responsible for this is buried deep within some library they're using for the text field.

Why would access to the source have helped here? Presumably the code responsible for this is buried deep within some library they're using for the text field. It seems rather likely to me that something like this would never be spotted by looking at the source, you'd have to analyze the application at runtime.