Anyone can suddenly use /tell @a to private message everyone and the command bypasses all previous plugins that haven't updated to block it

Shouldn't be a vanilla default feature, it wasn't before why should it be now