In the email they sent to users it's clear they don't use them anymore

Is it? I read that they disabled mixpanel while the incident was ongoing?

It literally could not be more clear

"As part of our security investigation, we removed Mixpanel from our production services"

"After reviewing this incident, OpenAI has terminated its use of Mixpanel."

If after this they continue to use them that's on OpenAI.