I agree it is convenient for testing. But the extent in which testing and
production code are mixed worries me a bit. I have no specific security
concern but it feels fragile.