Damus
semisol · 12w
Them being visible *with a lot of effort* does not mean that they will be seen or reported or fixed. And on the other hand, security researchers can also do security testing on closed systems, which happens all the time.