Nobody intentionally includes security vulnerabilities in a product. This is something that Doordash knows they are doing and have decided to do, not something they are doing accidentally.

Even taking a negligent security posture is not the same as intentionally including a flaw.