It's really not a loophole. I think this might literally be in the xdp-tutorials repo.