@tomw It feels like they wanted to build a blockchain identity system, but took some shortcuts in the implementation and left out consensus and rollback prevention. So they could potentially rollback an identity to a state where it was controlled by a different set of keys.
They publish a full transaction log, so this could be detectable in theory. But I'm not sure what recourse you'd have.