I think it's fairly clear at this point that ZeroNet isn't testing to make sure that this is the case.
Their TorManager [0] is basically a wrapper around the tor executable, and runs a fairly vanilla config.
So yes, leaks or attacks via bittorrent are actually an issue here.
[0] https://github.com/HelloZeroNet/ZeroNet/blob/master/src/Tor/...