That's a red herring. We're not discussing a security bug -- the system is working as designed. The problem is that the goal is not desirable, and the standards and code are complex to the point that an independent implementation is intractable.