That is not a security hole at all. You can only access the bootloader partition that way, you will not get access to any partitions with an encrypted filesystem or something else. This is a known design feature of the bootloader, similar to pressing F8 when booting up Windows.