This is a horrible article, nothing but fear mongering.

There's no bug, this is just how it was designed.

Elliott Kember, the supposed discoverer, is way behind and is stupid, mostly for taking credit for this "discovery". I was using this feature to find forgotten passwords months and months ago.