The "view profile as another user" feature was infamous for being... really thorough. At one point you would receive chat messages directed to the person you were viewing the profile as (I believe this was before the integration of chat and messages).

That doesnt surprise me. They will let highly problematic security issues persist for weeks