I don't think it's an exploit but certainly an oversight that I would expect to be fixed.