any more surprises lingering down the road?
Who actually checks the code? I think almost no one because everyone trusts "someone else" will do it.
You would be surprised. Check how active the GitHub is.
We are generally not ordinary people, we are almost entirely technology enthusiasts, and the number of cryptographers/programmers is HUGELY disproportionate to averages.