EWBF has not been updated in a long time. I have been running EWBF for months and months and none of my machines magically changed the devfees. You have something else going on, possibly a bad copy of the miner that someone hacked.
I'm on equihash mining is about since zcash mining launch and used EWBF's miner since its second public version. So in my case I have original copy and I already found what's happening there. Devfee thread uses other pools than mine and when my pool get stuck with new work, devfee thread continues its work and hits much more than 2% of shares. And I found that sometimes it uses dev's account for shares that supposed to be mine and not marked as devfee, just try any kind of sniffer like wireshark etc. Those who say it's ok with original version, just did not notice that things. Anyway I still use this app but now I'm sure I need something to change about that.