Or it is a mandated backdoor, and someone internally objected, and made it easier to exploit than it should be, or leaked how to exploit it?

> mandated backdoor

Probably one from the repository of backdoors "accidentally" introduced or "never" discovered.

The mechanism's there, just needs to be woven with other exploits.

Makes no sense for headspace to be using it if that were the case.