"PassthroughSubject" seems to be thread-unsafe, is this a bug or limitation?

I would guess that this is intentional rather than a bug. If weak references are an unacceptable drag on the performance of sending values then certainly synchronizing all events by default is off the table.