Earlier quoted context omitted.
Good God yes. Once my team owned a service that did X. Among it's functionality, it had an API that, as a side effect, stored some data that could be retrieved. Sadly, this service had no validation that the data being input made any sense in the context of what this service did. A developer on a neighboring team had a big promo project on the go. As a simple hack, and as a way to save time, his project used our serv…
How is this his fault? Your service had poor validation or design and was used in ways it was intended to. You knew this but still didn't patch it?
It's weird to have to say this, and some people probably think it's naive, but I stand by it.