According to the review the software has been confirmed vulnerable to publicly known issues via old public software. From here we could compare the number of the severity of the issues... but we already know they don't care about fixing those, so there will be more. What can be worse than this without being malicious?