Yes, because a 'security hole' isn't a term defined a God. What security holes are holes or not is entirely a matter of user expectation.