Why is this legal?

[abad via Digitalmars-d-learn]

This works:

class Foo {
     protected void bar() {
         writeln("hello from foo");
     }
}

void main() {
     auto foo = new Foo;
     foo.bar();
}

Is this on purpose and what's the rationale?