Worldcoin’s Orb had serious security vulnerability in operator onboarding: CertiK

The smart contract auditor found that operator verification could have let operators into the system without a verified ID or even being a company.
Source: Worldcoin’s Orb had serious security vulnerability in operator onboarding: CertiK (https://cointelegraph.com/news/worldcoin-orb-had-serious-security-vulnerability-in-operator-onboarding-certik)
Would appreciate your opinion about this