I thought the REPLY ALL option never includes the BCC recipients....
It does not. But when it comes FROM a BCC recipient, the original senders’ ruse is revealed.