It's not a security hole and it's not a bug. Wget even prints out all the things that are happening. Everybody seems to be grasping at straws right now just to be able to make the next branded vulnerability.
Whether wget prints it out is irrelevant, as it's often used in scripts.
http://lists.gnu.org/archive/html/info-gnu/2016-06/msg00004....