No, it is not a vulnerability. Misunderstanding of this functionality can result in developer introducing a vulnerability, but this is a well described, well defined feature.

Calling this a vulnerability is akin to calling the existence of `rm` a vulnerability because it can delete files.