I thought that SkMatrix's default constructor is going to return an identity matrix but that's not the case. Hence an unitialized SkMatrix and thus a TransformLayer without set_transform is causing the issue complained in flutter/engine#8362 (comment) .

This seems to be a severe rendering and security issue. The fix is on the way.