I don't think they realize it is a flaw.

It is the same with the private key that they are sending out for all accounts.  They don't think it is a flaw.

The inside joke though is that you can mine NXT with GPU farms, cracking secret phrases and rewriting transactions.