he made the first post about it a few hours after, only gesturing at the potentional. Gave it one week, then posted another spelling it out explicitly

Got it, I had to re-read the post a few times before it made sense. I think ICEBlock's creator is definitely a doofus but Micah isn't doing themselves any favors with the way they reported this - more like a "gotcha" than an actual vulnerability disclosure.