I'm not the crazy one here! That's a whole two characters on the same side of the keyboard...
I don’t think it’s a severe security vulnerability. The same thing can happen with $home/bin.