they acknowledged the issue and the fix was merged in 2022, what exactly is the criticism here?

No it wasn't - you can still easily replicate. I just did.

My point is that you shouldn't go around talking about how "secure" you are when you have large gaping things like this. This btw is not the only major security issue they have.

Big fan of nanovms! I should have linked that instead, sorry