[em-bee]

these features would not be a problem if properly documented in the release notes.

you don't need to vet every line of code, but if you don't read release notes then you only have yourself to blame if it breaks.

the problem here is not the feature itself, but the fact that it was hidden and undiscoverable by testing.

had the authors make a "christmas release" with the feature being active unconditionally, then even without it being documented, any user should have noticed the feature in testing.

things like this haven't been a problem until now, and they won't be a problem in the future because generally people are aware that playing pranks is not always nice for the recipients.