To be fair, I would probably also run my security test suite against a debug binary too if I knew this kind of thing could be caught.