The parent post did quality it appropriately with "if the docs are even close to representative of the actual application".

I hope the docs are not representative, but the parent post is right that it's a bad sign. At least put up a warning sign that it's insecure and only suitable for demo purposes to do that.