This was allegedly deliberately non patched to be exploited.

Anyone can allege anything. And even if it really was intentional compromise, show me the alternative where that will never occur. Insider threats are always going to be a major attack vector.