You’re right, Abraxas: they’ve changed their code. They’re still doing the shuffling client-side though so it remains trivial to bypass it: I’ve updated my instructions above with a new section at the bottom.