I disagree, that definitely sounds like something that could have been added. It is very probable whoever had the joy of holding the legacy code support bag after all the transitions had no idea this existed in it.

The crucial distinction being that this authentication bypass was added intentionally, but arguably forgotten to time and left there unintentionally. But I think fair to say, certainly it was a backdoor when it was originally created.