That exposes the flaw in the padding verification yes.

Assuming that all users will be implementing properly designed systems seems optimistic to me and avoiding known timing channels is in the list of things we are meant to be avoiding :)

The constant time version isn't terrifyingly complicated. I'm happy to port it over unless the consensus is that it's not worth it?