I tested this again with 4.0.30 and the crash is gone, but tabbing into folders mounted with sshfs does not work as expected. Suppose you have a folder test with
│ └── a
│ └── foo.txt
where sshfs is mounted from remote. Start 4ed in test, then ctrl+o -> r -> tab -> tab -> tab and foo.txt gets loaded. If on the other hand you do ctrl+o -> s -> tab -> tab it does not change into b after the second tab, but exits file opening mode and returns to whatever buffer you had loaded.