3 ms·

They wrote "compromised" not "buggy". There does not have to be any bug. It can all work as intended... by an attacker!