pull down to refresh

Was it an obvious vulnerability, or something that wasn't easy to see? If the second, that's a much bigger deal.