I absolutely think that vendors let in friends and family. This is how they even skirt the "no selling to vendor badges" they go outside with their vendor badges, give them to people with regular badges to wear to get in early, then once in they swap them back out with their attendee badges.
If SDCC wanted to fix this, security would bein place to prevent queuing before floor doors are open to attendees.