Need to check for protected meta keys

At line 648 you check for a leading underscore to determine if a metakey is protected and therefore will or will not be included in the custom field column. This isn’t a sufficient check. You should replace it with:

if (is_protected_meta($key)) continue;

That will detect keys that declare themselves protected irrespective of their naming convention (as well as picking up on a leading underscore).