Whether or not it was the intention here, leaving a common or garden vulnerability as a backdoor gives excellent plausible deniability. "Whoops, we overlooked that" is much easier to explain away than an obviously designed remote access mechanism