The problem is that this was a vulnerability in Notion without any mitigations or safeguards against it.