I think it is from the speculation that this is due to a very common package that binds to all interfaces by default after installation

He forked the cups repo over a week ago.