As someone who doesn't hold any IOTA I'd like to say I 100% trust CfB's explanation of the Curl-P flaw as copy protection against scammers. When CfB wrote NXT he intentionally introduced flaws to do the same for that system. Eventually, he held a contest to allow the community to find and reveal those flaws. It was a great way to get members of the community to understand the code and what NXT was doing while protecting NXT in the early days from rip-off artists. Of course he'd do the same to protect IOTA.
Just my 2 cents.