I agree with the sentiment but I think you are being too gracious with your analogy. The long and the short is a group of developers was relying on another group of developers to provide software with security concerns for free without vetting the implementation.

I don't know what is more unethical, the backdoor or the blind distribution of the backdoor.