May be not a bad thing. I was thinking more about building with workflow library and a set of various scripts. Multisig bug may be a good illustration however in most cases services loose money on something like fee siphoning attack.