To avoid confusion: all the described issues aren’t with Apache Kafka, but a separate piece of software called “Kafka UI” that is a separate software to Apache Kafka, and isn’t maintained or distributed with it.
This is where Apache has gotten a bit touchy about project naming using its trademarks in the past, AKHQ used to be KafkaHQ, for example.
Apache projects carry with them reputation of the ASF itself, not just in regard to software quality, but also in regard to governance. The desire to not have projects that aren’t beholden to those standards being mistaken as one who do makes perfect sense, as is the case here: the headline made me thought Apache Kafka and its PMC were at fault.