The security model has always been a half-baked afterthought. The initial versions were riddled with vulnerabilities .