Solution found and tested:
In core/modules/hide-backend/class-itsec-hide-backend.php line 50, add the following line:
add_filter( ‘network_site_url’, array( $this, ‘filter_login_url’ ), 10, 2 );
For the iThemes Security team, could you please include this fix in the next version?