As someone who doesn't hold any IOTA I'd like to say I 100% trust CfB's explanation of the Curl-P flaw as copy protection against scammers.  When CfB wrote NXT he intentionally introduced flaws to do the same for that system.  Eventually, he held a contest to allow the community to find and reveal those flaws.  It was a great way to get members of the community to understand the code and what NXT was doing while protecting NXT in the early days from rip-off artists.  Of course he'd do the same to protect IOTA.

Just my 2 cents.