It's more like finding out you can shoot someone's door knob off with your gun, creating a documented process to make that easier, and hiding it from the public despite your pledge to disclose door knob vulnerabilities.
It shouldn't be a surprise when someone else starts shooting off doorknobs.