Maybe?

I wouldn't assume that the bug doesn't bypass CAA checking.

Very important question to answer.