Well, is that how it's supposed to be functioning? The tweet says it's a security vulnerability, their response says it's functioning as designed. Not mutually

Well, is that how it's supposed to be functioning? The tweet says it's a security vulnerability, their response says it's functioning as designed. Not mutually exclusive.