Comment by mtnGoat

You can use these “features” to hijack accounts too ;)

I’d call them bugs, but they’ve been reported and didn’t get fixed.