Seems someone can crack the code so he can do what he wants?

EDIT: you can create your own burn address using a tool like this one: https://github.com/adamkrellenstein/unspendable (if you don't want to learn the technical details on how to do it yourself). Do realise that it's a BURN address, everything you sent to is is considered BURNED... if you generate one, fund it, those funds are now gone forever...