"However, it turns out that the fix was not complete as one can still abuse invokeWithArguments method to setup calls to invokeExact method with a trusted system class as a target method caller, " Gowdiak wrote.
She was made to address things that went previously unconsidered: return and cancellation policies, frequently asked questions, method of payments, what happens if you miss a class, etc.