and now the recent Meta model 'security issue' begins to make sense