So, a security engineer, working at Google, cannot catch that a 4 lines patch is ineffective?