Why is that sad? Modsecurity sources are freely available on github - and nginx.com emails are seen in the commits.