They probably say it’s low priority because it’s a regression: http://www.anandpraka.sh/2016/03/how-i-could-have-hacked-your-facebook.html