the same really. I don't think anyone will know for sure. The poor guy might just have not caught the issues back then. Or maybe it was malicious and still is.
It's hard to say. In these cases, the wisest option is "innocent until proved guilty". False positives are worse than false negatives.