OTOH it could be also fixing a critical vulnerability. Double edged sword. 

 In this case that's unlikely: you'd expect them to patch v0.7.x too. 

 An attacker could do that too to look legitimate 🤷‍♂️