Honestly, it seems far more likely to me that some "SEO Expert" came through at some point and said they should optimize their searchability by making sure sear

Honestly, it seems far more likely to me that some "SEO Expert" came through at some point and said they should optimize their searchability by making sure search-engines didn't index certain pages. Seems far more likely than that there's anything actually bad going on here. Also, jumping from "Huh, lots of robots.txt entries" to "SQL injection flaw" doesn't make sense to me. I don't see how those things are related.