Why is the Pro Events Add Event admin URL public facing?

Permalink
index.php/tools/packages/proevents/add_event/

Why is this a public facing page by default? I my case it doesn't actually function (fortunately), but it's still pretty odd. Any insight from the CodeStrat Inc. team? Is there a way to block this through the add on that I'm not aware of?

Thanks,

Casey

dcdoran