The low quality refers to the features with security holes. So no, it didn't work (in this hypothetical).

But it is low quality if it's vulnerable to exploits. And if that's the case, I wouldn't say it really "works".

Those two things have almost nothing to do with one another. Lots of low quality things work they're still low quality.

only until it's ransomware'd