Uncovering, Explaining, and Mitigating the Superficial Safety of Backdoor Defense