The internal model derived keys from public developer recovery phrases, spent another account's test ETH, and left it out of its report.