I'm hoping that checks are in place so that when a feature is disabled in the admin, that it can't be accessed by going directly to the URL. This isn't done in the latest version of 6.