Here's the related freedom-maker issue I created about this: https://salsa.debian.org/freedombox-team/freedom-maker/-/issues/196
Linking it for completeness; the bug report and script contained therein is the result of further research into this, so it can easily be reproduced.
signature.asc
Description: This is a digitally signed message part.