It's not "most likely" a bug, it's definitely a bug. Nobody said, "We want to lower the security level of this feature, so let's keep the password prompt but a

It's not "most likely" a bug, it's definitely a bug. Nobody said, "We want to lower the security level of this feature, so let's keep the password prompt but allow any input to the password prompt."