another finding from a seed/starter Python (Flaks) project which devs have likely built their projects with and had "adopted" the insecure code that leads to a security vulnerability (harmful IDOR here)...