Sure, security expectations for a demo are ~0, but “everyone can see everyone else’s inputs” is surprising even by demo standards