I had far too much faith that they would have at least tried to do a decent job of it. Some of the vulnerabilities we've seen are so basic they haven't bothered - being able to share tokens in a link ffs. Once we realised what was happening we spun up 150 odd Firefox containers per machine and just manually culled those on two bars. Ironically that would have been much more difficult to monitor on the old system of having to auto refresh - the new system made it much, much easier.
The biggest problem is the disconnect between the festivals comms and what really happened - they said they would detect multiple devices etc etc. People who were scared of using more than one device on their home internet connection incase they got detected as a bot, but actually it was easy enough to game without resorting to any automation - and it was easily avoidable.
Just like a server handling web traffic, email clients can not handle sending all the emails at once instantly - It makes sense that they are sent in batches over a longer period of time. They also probably do not start the process until all the orders are consolidated.
You will find with any email you receive in a massive bulk that not everyone receiving gets it at the same time.
I'm so jealous, I think I've checked my emails about 200 times over the past 23hrs and 37 minutes, desperate to get the confirmation so I can just relax