systemd sets up /sys/fs/cgroup/pids/init.scope specifically for pid 1. So it could be argued that the bug is that systemd doesn't fully clean up after itself when switching to the real root, assuming pid 1 there is also systemd.