I think they, and the CIA, call it a feature. Just like messenger apps which try to "execute" every "image file" or link thrown at them.
No one cares about security. People used to care for a fairly short period of time after something bad happened to them, but even that seems to have gone by the wayside as breaches, leaks, and use of exploited code has become normalized.