Michael, ok just tested the call from a web app to an EJB as described in the original issue and the cache is being skipped in the EJB tier - for remote clients the call will be passing through the exact same point that is affecting the web app calls so it does appear to be exactly the same issue.
I am just looking now at how large an issue this will be to fix.