I'm also not convinced this is a "security breach." They're being allowed to do it. It's more like an unforced error, if anything. Not that it changes anything material about the situation.
That said - a small majority of congress is currently complicit in this, but I expect that to reverse as many Republican states will have congresspeople whose constituents are affected. I'd expect by May of this year some of this will have been reversed.
Sadly that's too long and some damage will be done perhaps permanently...