vlc broken in ascii?

a user on twitter reported that vlc is broken:
The package vlc 3.0.2-0+deb9u1 from ascii-security requires vlc-data of same version, but the only vlc-data package available has version 2.2.7-1~deb9u1.

not sure we can fix this?