Also noted in the bug:

m.tumblr.com IS NOT a mobile variant of tumblr.com

I kinda wished I had that blog now so I could put a proof of concept up to show why this is a very bad idea from a phishing perspective.