Security: create sub wiki not secure?

It appears there is no security when it comes to creating new sub wikis. As an anonymous user, if I simply append "?action=edit&eaction=create" to the URL of an existing wiki, I can create a new sub wiki. This is a major security hole. Can someone confirm?