Theme_My_Login_Security::init() passes empty string to include()

I took a look at my error log and there’s about 1000 notes about this. I’m assuming the problem is that Theme_My_Login_Security::init() on line 100 (in modules/security/security.php) passes the string from get_404_template() to include() without checking whether it is empty.

Lines:
=================================
$template = get_404_template();
include( $template );
=================================

Warning for reference:
=================================
PHP Warning: include() [function.include]: Filename cannot be empty in [ROOT]/wp-content/plugins/theme-my-login/modules/security/security.php on line 100

http://ww.wp.xz.cn/extend/plugins/theme-my-login/