I was able to trigger a password reset, which means the account was not taken over at all.

Change 97117 had a related patch set uploaded by Legoktm:
If a user has a temporary password set, still take over the account

https://gerrit.wikimedia.org/r/97117

I had created the account via email so it had a temporary password, but never a real one, so $user->mPassword was null, meaning the extension thought it had been taken over. Patch makes it so that we check for $user->mNewpassword too.

Change 97117 merged by jenkins-bot:
If a user has a temporary password set, still take over the account

https://gerrit.wikimedia.org/r/97117

Whenever this is deployed the meta account will get properly taken over.