They have existed for a number of years[0]. Even still, being a new service is no excuse for such poor handling of OpSec.

[0]: https://twitter.com/CodeSpaces/status/265757401368637440