Those are not bugs, IMO.
A lot of web Javascript would be useless if events didn't bubble, and being able to define invisible click areas is useful in a variety of contexts.
Sucks that a few people are going to be malicious about it but I think the benefits outweigh the drawbacks.