A broken blind is more comparable to a server (http, ftp ...) with no authentication/password, maybe just for some directories that should have been protected.

A broken blind is more comparable to a server (http, ftp ...) with no authentication/password, maybe just for some directories that should have been protected. Also, wifi with no password. Exploiting a vulnerability is more like using a bump key or picking the lock on the door. Would it be weird if the cops could pick the locks on your door without a warrant (you know they're all crap locks because hardly anyone knows the difference).