Some mistakes, yes. But this was a case of such a basic and clear cut use case that should have been tested.

My understanding is that companies such as this rely purely on manual testing. Thus it is easy for things to slip through the cracks. Usually they never get hit by penalties or get caught so the pressure to do better is not there.