I was thinking of posting the "end-to-end encryption that wasn't" but it was already mentioned in the article.

Security flaws in a product are part of the life cycle, unavoidable and might be accepted as long as proper and timely response is taken. That's due diligence. But lying about security? That's not even negligence.