When you visited a profile, there was a "edit" button so that you could just change email and password of every user. The kind of bug my grandma would find just by clicking around.
It's a side project (and given the setup doomed to fail anyway). Super big (US) IT-companies struggel with how to being profitable, whilest IT is capital/work intensive (to avoid these embarassing bugs).
Edit: I've sent the site op an email