Question is, how did people find out this specific set of mute keywords work? Was it a leak or did people really just figure them out through trial and error?

Either way it feels like Twitter has an incentive to close this "loophole" because they would believe it would decrease engagement, which would impact their bottom line.