Why is this legal?

[abad via Digitalmars-d-learn]

This works:

class Foo {
    protected void bar() {
        writeln("hello from foo");
    }
}

void main() {
    auto foo = new Foo;
    foo.bar();
}

Is this on purpose and what's the rationale?