When I say it was done intentionally, I mean opening an authentication-less was intentional.
It could be disguised as an access for their own service and the real purpose be mass surveillance, or it could be a simple mistake in a big codebase, but the "door" is definitely not a bug.
Even though nowadays we keep hearing about nefarious backdoors, they used to simply refer to hidden service entrances for software creators, a completely legitimate use.
- No, it's not the case here. Unless you can prove it. There's no evidence it was done intentionally.