They did address the most pressing problem. But from their wording, I was under the impression they had moved the blacklist to the server and were just telling the client "this player is blacklisted" rather than flat out sending their account information. I thought this due to the blacklist influencing the lodestone.

To code it this way was a foreseeable oversight that they should have seen. I mean this series of events would immediately be in my mind if I was coding it.