It's a team of 3. It's not like they have a security team, dedicated testers. They were for very long releasing beta software. That in fact already worked.
If a core feature of your software requires security guarantees you can't just say they don't have a "security team" .
If a core feature of your software requires security guarantees you can't just say they don't have a "security team" .