The cynic in me thinks this is already known and is in use by a "strategic partner" as a vector. The next version will only make it harder to find and exploit.
I doubt this was intentional at first, but the fact that they don't want to fix it is very fishy.