Also[2] claims backdoors, which is impossible to prove. They could just be bugs that were exploited (and fixed).