Don't forget that time last year they accidentally deleted data for 400 customers, and it took them 2+ weeks to restore it. Which is concerning when taken in conjunction with their plan to require all new accounts to be cloud hosted (IIRC).

Having used Jira, it was very clear from the sorts of bugs it had that the codebase is a jumbled mess, so I'm not at all surprised it's full of security holes.

https://www.theregister.com/2022/04/14/atlassian_ongoing_out...