A bech32 address ending with p can be modified be inserting or removing q characters immediately before the final p character to make a new valid bech32 address. Why does this work?

Are there any other similar mutation weaknesses in bech32?

References:

• issue raised against bech32 repo
• mailing list post