WordPress’s standard login shorthands work no more

Wordpress core redirects a variety of shorthand URLs to the admin: e.g. if a user visits example.com/admin, they’ll be redirected to /wp-admin; Visiting /login redirects to /wp-login.php, and so on. (See function wp_redirect_admin_locations() in the file canonical.php.)

However, this “WP Cerber Security” disables the above described standard redirecting functionality even before user’s turning on the “Custom login URL” option in the plugin. Is it a by-design feature? — I would say it’s a defect.