They wouldn't "have been the ones to flag something like this down". It should've been caught long prior; the code shouldn't have been written, it shouldn't have survived code review, and it should've failed automated tests.

It's a trust and safety incident now, but it never should have been.

The trust and safety team was only responsible for censoring wrongthink