> they knew the JS bundle gets so heavily scrutinized that it'd eventually get spotted and reported on

Most likely someone did and raised the issue but they're moving too fast to fix these things before clicking deploy.