First someone takes the pain of reporting a security flaw instead of exploiting it to help you out.

Your answer - 'its not a bug its a feature'