Presumably someone will notice the bug in both of these scenarios at some point and it will no longer be treated as safe.