There is a difference between intentionally exploiting a bug, and discovering it by accident. Anyone that does discover it by accident should report it and then proceed to try and not use it at all.