I was addressing your analogy to "stolen election". At any rate, I'm just pointing out that (1) any decent project would address this situation once they were

I was addressing your analogy to "stolen election". At any rate, I'm just pointing out that (1) any decent project would address this situation once they were aware of it, (2) Apache is aware of it, and (3) they had way, way more than enough time to at least acknowledge the issue. Neither ignorance nor bureaucratic slowness can excuse their complete lack of taking any action to protect their users. If you exclude ignorance and slowness as reasons, this is intentional. I don't know why, but the fact that something is actually wrong on a significant scale and is intentional in no way matches "stolen election logic".