According to @olasd's analysis (which i agree with ;), the loader-tar (which is used as the loader-deposit's collaborator) writes its metadata without forwarding the metadata received if any.
That's a regression in the loader-tar's behavior (probably introduced in D795).
It must allow client to pass their own metadata and only set its own as a default.

In the mean time, the deposit loaders must be stopped.