Their "secure codebase" was torn asunder pretty quickly.