Just curious: You sure it's a bug and not a hack? That is: You believe the Medium email? (I'm a journalist and we're taught to question everything ...)

There's a big legal diference: In the U.S. hacking is a federal crime, and bugs are a computer issue. And the skeptical journalist wonders if Medium might be downplaying what happened for legal reasons.