The language they employ to disavow any association with 'taint' seems to indicate they disabled it, because their package is supported by the latest two releases of Perl, which, if I am not mistaken, typically enforce taint without it being explicitly called.