But then they’d have a dev team who wrote the code and therefore knows how it works.

In this case, the hackers might understand the code better than the “author” because they’ve been working in it longer.