Never saw what the final verdict on that insecure wallet creation exploit was, but remember some people were more than a little suspicious of it.
Discussion
It was a function that has been deprecated for years and marked with "do not use in production", clear user mistake afaict.
Ah thanks. It was more in the weeds than I could follow, and probably only in use by a few well before my time. Sounds like no cloud of suspicion stuck around then. Good to hear