Interesting. I would think that the authors of the open-source firmware have come across the backdoor at some point, assuming they did go through the reference firmware.