My wild guess would be that they used chat rooms as a sort of access control. If you are in the room with the bot, you can issue commands. They could have for

My wild guess would be that they used chat rooms as a sort of access control. If you are in the room with the bot, you can issue commands. They could have forgotten that you can also just add the bot to another room. Major face palm, but plausible.