One word: Aveda. the theme has sold hundreds of thousands (millions?) of dollars worth and it's one of the worst codebases I've ever seen. It may pass WP_DEBUG, but it's still insecure, uses outdated methods and overall is just an embarrassment to theme developers everywhere. But it's so profitable I doubt Envato would do anything about it. It has high ratings, but do you even know if the person leaving the rating is qualified, or knows what a problem under the hood could be?

Years ago I decided that I would never work with a TF theme regardless of circumstance. I've violated that rule twice and been burned both times. While I'm sure Envato is trying, I think it's too little too late.