Sadly I think it has more to do with the way Windows handles stuff in general. My personal machine seems to have no issues, LMDE with the foxes (Firefox/LibreWolf); my work computer though, Windows with the chromes (Edge/Chrome) seems to get confused the moment their is a second profile in the browser.
All that being said, I've definitely tried clearing the cookies and just living with it.
90 days is standard for "you're code is fucked when someone presses this..."; if the issue is Dave left the keys in the parking lot and someone copied them, two weeks is more than enough time for them to recieve the notice, create a ticket to rotate the keys and a ticket to trigger an investigation (gotta document anytime an org fucks up so it doesn't happen again, right?). Maybe I'm over simplifying it though, I don't know how their org operates.