Those two things have almost nothing to do with one another. Lots of low quality things work they're still low quality.

The low quality refers to the features with security holes. So no, it didn't work (in this hypothetical).

But it is low quality if it's vulnerable to exploits. And if that's the case, I wouldn't say it really "works".

only until it's ransomware'd