This is probably some kind of configuration mistake… I wouldn’t presume the author has any nefarious intent.

Probably the default in whatever framework they used.