This and the fact that they didn't release the OS X patch at the same time as the iOS patch constitutes a total FUBAR: The mistake they made was so basic that one wonders why on earth some junior / non-sec developer was working on a critical security component. Heads should be rolling.

If I understood correctly, they were also intermixing tabs and spaces (the web view implied so), so they also have that problem. (Just require spaces and ban tabs automatically so you know there's no way anyone can fuck things up).