When The Front Door Becomes a Backdoor: The Security Paradox of OSDP