I do feel like it's entirely possible it was a bug. I would imagine if they wanted to do a backdoor, they would require some form of key.

That would negate plausible deniability.