This is quite a catastrophic security issue by just using a single character to bypass authentication.

And no-one cares.