Yup, I believe that's what they used. It's a documented feature, but one that I was completely unfamiliar with. I also opened registration, but wasn't monitoring new signups.
There wasn't any harm to it, but it's definitely something that can slip by an insufficiently wary admin.
