@matthew_d_green I'm *very* happy to see people finally proving this and calling it out. I've assumed this to be true about codecs forever; they're just too complex.

Hardware manufacturers and their software contractors all focused primarily on performance and feature checkbox filling are the last people I trust to perform secure data handling.