This is the most charitable explanation and I think the most likely. Largely because it requires everyone involved to be even less competent for even longer and simply not notice the glaring holes in what they claim is the most important security feature in human history because, presumably, the chatbot kept telling them it was fine.