Maybe "basic" isn't the word I would use, but I thought the same thing. This is one of those vulnerabilities that is completely obvious... in retrospect.