Exactly. I'll go further in saying a system or software should be considered insecure if it connects to Internet and wasn't designed/implemented with strong security. That's most stuff.

That's a red herring. We're not discussing a security bug -- the system is working as designed. The problem is that the goal is not desirable, and the standards and code are complex to the point that an independent implementation is intractable.