This scares me since it's not super noticeable or easily irreversible. Removing this package does not remove the alteration to system.module, unless they delete everything.

I've tested and this is not working. The problem is that it needs a cache rebuild so that the new implementation is picked up. But before running database updates, there's no cache rebuild.