I cannot answer for Pelle, but I was also experiencing this bug back when it was reported. FWIW: I'm unable to reproduce it with 1.6-1. That being said, triggering the bug does seem somewhat stochastic, so I can't rule out that a bunch more suspend/resume cycles would trigger it. But so far, so good!
Same here, no crashes recently, yay, however, I think that this crash bug illustrates the more general issue that the lock screen is bypassed on any crash. Swaylock should be able to restart itself on failure, perhaps with a daemon. There could be more vulnerabilities of this class, right? I believe XScreensaver has a strategy for mitigating these types of vulns too.
Thank you so much for your work. I wish I knew C and could help, but now I can only complain and hope someone else fixes it. I could probably write a daemon in shell script though if such a patch would be accepted, although there are probably more elegant solutions to this in the swaylock code itself.