As per your described points I have tried with WP default themes 21,22 and 23. Create page and set as password protected and make the page as default home page. The conte of page not shown and its work perfectly with Breeze.
Could you please provide the video of your activated theme with replication of above mentioned steps?
I can’t break the site right now as it is a campaign that is active. When you tested, it isnt’s every time it’s only when/if it cached the password entered version. so try entering the password, then clearing the cache. If you can’t replicate it, I’ll follow up in the new year with a video, disabling breeze clearly fixed the problem, so I’m sure it was caching the password entered version of the site.
It would better to provide video.
We have the exact same problem. Breeze completely discloses any password protected pages publicly. This is horrible. I don’t even know for how long this issue exists, but I am really kinda shocked. Trusted this plugin a lot. But this is not acceptable. How to fix? Currently, using exclusions is the only option.