I got this bug on desktop, running chrome, with no VPN.
This was, as most things like this are, just a pure dumb fuck-up by some guy putting things on prod without properly testing and staging. No need to put on any more tin foil hats than we already have, the incompetence is plenty reason enough to point and laugh.