Privastead/OpenMLS erases past keys from persistent storage in order not to suffer from the vulnerability you mentioned.