We analyzed 520K lines of OpenClaw source code and found 53 vulnerabilities including a CVSS 9.8 command injection. Security researchers found 42,665 exposed instances on the public internet. Here's what the fastest-growing GitHub project gets right, and dangerously wrong.