I do think your theory of this being a gray hat attack is actually somewhat valid.

It's fairly benign, but at the same time it's exposing an obvious vulnerability. So maybe someone who realized nostr needs to understand "this", implemented "this". But in the most obvious way, which makes me think, you may really be on to something. Someone's probably doing this big favor.