It’s definitely possible to add a feature like that to a backdoor but I don’t see how that’s a proof it’s a backdoor. It’s definitely not something backdoors always do and we don’t know if this functionality is in Windows or it’s part of the exploit. So am I missing something? Or are people just jumping to conclusions?