Maybe, but it has been a lot harder than doing the trivial thing for a few years already.

If it can, it's a vulnerability that has to be fixed.