The problem
PR #14071 added mediaType enforcement to bidResponseFilter. However, the module checks bid.meta.mediaType against the ad unit's configured mediaTypes and therefore doesn't catch In-Banner Video (IBV) on multi-format ad units.
Proposed fix
Add a comparison between bid.meta.mediaType and bid.mediaType. When both are present and they don't match, the bid should be rejected. This would catch IBV regardless of ad unit configuration.