
Well What did they expect
If you train 1000s or hundreds of 1000s in the art of intrusion and only keep the good ones, some of the rest are going to go solo. It likely doesn't help that local gov doesn't like its population to use strong encryption and with a local culture (often gov sponsored) of software piracy, there is going to be a massive base for exploits. You reap what you sow.