@gcupc Aha, an apparently-authorative source on the whole #efail thing, and a link to the paper draft: https://efail.de/
Seems like a little of column a, a little of column b.
@gcupc Thanks for the heads up, I wouldn't have bothered doing the research otherwise.