So, just because they showed they can doesn't mean they showed how.

I dont know why the timing of the bug is surprising to you.