Personally, I want FDA approval to mean it is as provably safe and effective as possible. They said they wanted more evidence before approval, and I think that’s okay. Good, even.
The way the US treats recreational drug use and self-medication is horrific, but it’s not really the domain of the FDA.
I would rather have not-yet-FDA-approved legal-for-personal-use mdma than what we have now or an unproven drug approved by the FDA.
It looks like a research group found a security vulnerability that they then used to find a single common key in all of the cards made by this company. The second part here is a reasonable concern, but the article calls the vulnerability a backdoor in the beginning, which I think is fairly misleading.