Damus
semisol · 4w
Them being visible *with a lot of effort* does not mean that they will be seen or reported or fixed. And on the other hand, security researchers can also do security testing on closed systems, which happens all the time.