I think the worst part is that the vulnerabilities were found and abused or aired put publicly by the community in a effort to tear him down, instead of just addressing it directly with him
Turning what could have been an easy fix to something that killed the project publicly