Working theory: a market will do this citing security concerns in order to dissuade other people from also trying to open markets in order take their customer base.

They will posture how difficult it is to secure themselves from an exploit in order to make it seems like something that would be expensive to contract out a no-questions asked dev to fix (also because the operator of a proposed new site knows the best OpSec is to not trust anyone else with access, so they'd stay stagnant until they learn of said new exploit in order to learn how to protect themselves from it... if only it existed).

Not sure anything is safe now days.