They've so far ignored the ticket https://github.com/google/artemis/issues/40 to potentially avoid the Streisand Effect (drawing attention to it), yet started work fixing it.

That reads like a coverup as open discourse would have admitted a mea culpa and apology.

I predict they will close the issue without discussion, citing this PR as the fix, potentially associating the fix with a less guilty looking duplicate ticket.

I'd like to be wrong but this is what other commercial projects do when they are called out on a shady practice.