Knowingly and willingly giving users a false sense of security? How is that not worse in every way?
If they couldn't manage to get false negatives down to an sensible level without compromising security in such a blatant way, there's two courses of action: Live with it, or don't release it.