[taternuts]

You didn't miss anything, it's very easy to deploy a bug in a smart contract and why anyone using it for anything important should have their contracts be audited by a third party professional(s).