It is not really odd. The MCU starts and probably executes from an empty FLASH memory, after the bootloader relinquishes control.
If the FLASH is empty, e.g. all FF, the MCU will try to interpret FF or groups of FF as opcodes. There might be a corresponding opcode or it might be illegal. Depending if the opcode has a meaning, how the MCU is build etc. a number of things might happen. E.g. the MCU running through memory, wrapping around, at some point maybe hitting the bootloader again. Or continuing triggering a reset because of a bad opcode, reseting into the bootloader. This and a bunch of other events can look like some program causing some periodic event happening.
MCUs in safety environments should of course not do that, so you pay extra for an MCU.