We know that backdoors can be intentional for use by 3-letter agencies. And there is plausible deniability of the bureaucracy when they can pass blame onto a single individual.
Or it's beuracracy being beuracracy. The TSA is a lot of security theater anyways.
The US (and almost every government) has reliable ways to covertly move a person that don't involve putting SQLi in their own codebases.
The classic way to covertly move a person is to give them a new passport to travel under, and have them move around like every other schlub on the planet. Competent intelligence services make sure that this isn't easy to detect by making the fake passport's identifier indistinguishable from real ones. Russia has prominently failed to do this several times[1][2].