which would suggest they are a CMM5 shop without the formal certification.
Since the key things are
1)Find the bug
2)Find why it got through our development filters
3)Update our filters
4)Check the rest of the code base for any other with this pattern.
It would seem they are engaged in this process unconsciously
He actually seems a fairly modest and quiet guy most of the time.
Except when someone suggests something breathtakingly idiotic.....