Isn't it said that with enough users and use cases, every bug becomes a feature that someone depends on. I'd bet that a lot of these vulnerabilities are the result of intentional trade offs in design.