This is a great reminder that serious security issues don't always require sophisticated exploits. Sometimes a simple logic gap can have a much bigger impact.