I cancelled the order and reported the vulnerability. Didn’t went that far to check. Maybe they could have sent it though.