If a consumer device ships with a “debug console” that gives the manufacturer (or any attacker who knew about it) root, that’s a vulnerability. If it happens on purpose, and they don’t tell you about it, then that’s the very definition of a backdoor.
