Really interesting read. This feels less like a security bug and more like a missing execution boundary.