Flutterby™! : Matrix.org security issues

So Matrix.org bills itself as "An open network for secure, decentralized communication."

Someone cracked their internal network wide open and started opening Github issues on their findings. Apparently that account was quickly suspended, but there's a repost of the security issues that has some constructive policy suggestions that are worth a read-through.