Incorrect syntax on the part of 3rd party developers is not a “bug”. Granted, there is some error checking they can do for some errors, but, for an issue like this, they are relying on the operating system. You could create a bug report with the Windows folks, but, you won’t get very far, as I imagine if they cared about disallowed character issues, they would have done something about it 30 or more years ago.
As a matter of process, I rename every package directory name (mostly for organizational purposes), and I check every manifest for proper syntax (developers screw these up all the time. Errors mostly show up as the Content window won’t open).