udev rules interfering

I installed WhatPulse and adding the current user to the input group and everything is working fine.
However, I later installed libinput-gestures and it would continue to get "Permission denied" while trying to read from /dev/input/event devices.

After a lot of investigation, I found that WhatPulse has put a udev rule to change the permissions of /dev/input devices to 640, where as the required permission is 660.

Is this a bug?