How do their security / quality control teams not figure this stuff out...?