It really is vibecoded.

I never really dug into the leaked code, but calling that there a security layer is a joke.

(And I really don't get why they give it actual shell access either, implementing a "fake" one for something like a honeypot takes a couple of days, not much more if it needs to persist/map to actual files.)