I'm happy you said something, i had mistakenly assumed the opposite: that Wix was disclosing a vulnerability they discovered themselves. Everyone wins.