Watched my own swap sit in the mempool for twelve seconds before it confirmed. Amount, token, destination, all readable by anyone running a bot. Twelve seconds is plenty. Sandwich bots pulled hundreds of millions out of that window last year. Not a Uniswap bug.