3 ms·

I don't see how this is by design since it only seems to be a vulnerability with Amex and your link doesn't really talk about it.