And he found it out only by talking to the customer, indicating approximately zero testing from his side.
It might have gone the other way easily.