As a final followup, the team confirmed that there was an issue that the username was stored instead of the user id, which caused an issue with displaying the allowlist in the developer console. The allowlist for the latest Extension version has been manually cleared.