I think you are totally right.

However with advancements like these... certain responsibilities come.
Since @steve-walschot is a "EU top 25 security auditor" I can't help but feel a bit that after having worked for 'countless hours' he could have at least given it his expertise test since being a top 25 security auditor... Especially since the Woo Plugin was already "almost done" 1 week ago. Let alone that if you have "perfect knowledge" in about 20 code languages "without the help of the allmighty Google" you would also have the knowledge to structure your code in a way that this is not possible.

It's just that this product has to deal with payments, and this stuff is indeed essential for Steem's success, so it must be done really thorough...

Imagine that if I had a black hat, I could now have sold all these digital goods somewhere else with serious implications for @fyrstikken.