Maybe bring that issue to Bitwarden's attention on GitHub or other channels, and not just a comment here on HN?
I'm simply questioning their justification/excuses for not fixing an issue Cure53 quite correctly flagged. Me opening an issue on Github that mirrors one from Cure53's audit report wouldn't be constructive.