In a weird sort of way it does. Consider all of the following
- big companies are often incompetent and inefficient in a lot of ways
- The mozilla foundation has confirmed the security issues that Anthropic found were real
- Generally over the past few years, anthropic has some of the best, most reliable models
- Claude code has been kinda bad for a while
- Claude code has been mainly bot-written for a while as well. This can lead to functional, decent code that's still terrible in many ways as seen from the leak. Also it's entirely possible that bots are worse at detecting issues in bot written code. You could argue if they were good at it, they would be less likely to write those security issues in the first place?
- Anthropic could have very skilled ml engineers but mediocre software developers