I think you are mostly correct. That is why some people call it an "issue", while others refer to it as a "vulnerability". I personally don't think it is a real vulnerability, more like a quirk.