"who's activities include distributing the Linux kernel via kernel.org. They represent a particularly juicy target for nation-state actors"
If they really cared, they wouldn't host it on Linux. It would be OpenBSD or something with every software measure possible on read-only storage that admin physically replaces. That's just to start with. It's good that the author is taking measures but it gets amusing how much risk they keep on distribution side when you bring up nation-states going after them. Most big ones have 0-days for Linux systems anyway. They just use them in a targeted fashion to get more ROI from them. China can probably hit anyone working for Linux Foundation if they wanted to outside some really, paranoid setups that might exist.
They just don't since they don't care about them. They're 100% unimportant to Chinese intelligence. What is important is the source code of the kernel and privileged software which are freely available. If anything, letting Linux development and distribution continue is a good thing for Chinese intelligence since developers add features (and vulnerabilities) more than do code audit on a project whose source is available to the black hats. Makes Chinese spies' jobs so much easier. :)