> I mentally noted that this was weird and that this might have some security implications so I should look at it later.

If I had experienced the same situation I'm sure I wouldn't have noticed that something was wrong. Kudos for noticing that and thank you for documenting it for everyone to understand :)