That's very much false. I've worked with several of the engineers who were involved in that, and they went through all of the standard code & UI approval procedures. There was a bug in the ability to turn it off, but that also went through all of the normal code review & approval channels, it just wasn't caught.