They explained the trade-offs in the original blog post. They had considered this class of security holes and had a contingency plan in case one would be detect

They explained the trade-offs in the original blog post. They had considered this class of security holes and had a contingency plan in case one would be detected. They simply executed that plan. I'd say they handled it very well.