He was basically, 'it's a feature not a bug'. And 'it's expected that people using this library know about security.' Which I guess doesn't include him because his own example was vulnerable.
Madness string 96035
You have a feeling like get the fuck out of here, this isn't okay. The feeling is real, it's part of being human. It's something you need to listen to.