I'm sure they did it out of incompetence and/or spite, and not due to some security concern or technical issue.
Without knowing MUCH MUCH more into the issue, I wouldn't call it neither oversight, nor incompetence.
I'm sure they did it out of incompetence and/or spite, and not due to some security concern or technical issue.