Thats how it was planned originally, maybe they switched to a different system for now and will change it in the future? Certainly sounds like a flaw to me though.
I wouldn't say that it is a flaw, but I do see potential situations in which this could end badly.
...I think it should not contain any spyware or keylogger
Why would you even suspect that? It is open source.
It seems inevitable that questionable stuff will be sold on OB. There is no way to moderate that.
There's nothing wrong with that and I have no idea why you should let it affect you. Just ignore it.