While I agree code like this shouldn't be released fail-deadly it's also patently obvious it's not to be used. There is sufficient notice in the README. If someone uses this, it's at their own peril.

Would you make the same argument for reference implementations of algorithms? For example, small details leading to bugs that can be compromised?

At some point people have to be responsible for themselves...