mac minecraft client still using log4j 2.14.1?

I updated my java server to 1.18.1 but i noticed the client/launcher still uses the log4j 2.14.1 - shouldn't that be 2.15.0 to avoid the bug or do you mitigate it some other way. I'd still rather not have that library version on my machine...

It's at:

/System/Volumes/Data/Users/MYUSERNAME/Library/Application Support/minecraft/libraries/org/apache/logging/log4j/log4j-core/2.14.1/log4j-core-2.14.1.jar

and recreates itself if i delete the log4j directory and create/start a new game.

Launcher

macOS 10.16.0 2.2.8115

Friday, December 3, 2021, 2:33:08 PM

669b204ea496191f0e56fc68c55aa0e6917925fb

Bootstrap

1036

Wednesday, September 15, 2021, 5:57:45 PM

e96cf7853afa35a29f583593cc437656b1ef9d19

UI

8290

Friday, December 3, 2021, 2:30:24 PM

669b204ea496191f0e56fc68c55aa0e6917925fb