I triage a lot of serious incoming security bugs (and the not-so-serious ones). This would not be classified as that extreme of a bug given its limited use case and difficulty to trigger in real life. Burglars don’t do this. They throw a rock through your window/sliding glass door (or kick a door in) and waltz through.
Moderate to low security issues are never prioritized in a code base, only serious ones. So, frankly, I’m unsurprised.
