It's a bug that this can be forged by an outside attacker, even if it is a consequence of the implementation of a feature.

(In fact, it's a bug that defeats the central purpose of the “system of record” feature it’s been suggested that the underlying functionality exists to support, as trustworthiness is the essential point of a system of record.)