It's a nice find, but I still fail to see how it is a vulnerability or a security issue.
But, as maxltv clarified, it's not a policing tool but an authoring tool and described use of the product violate their TOS. My case is relevant if clients use it as a policing tool.