Flashing a device not assigned to a product, bug?

If I flash a device NOT assigned to a product with firmware containing the PRODUCT_ID and an old PRODUCT_VERSION it will be automatically flashed with the latest product firmware.

I don’t think this should happen as the device is not assigned to the product.